How to use Devise's Confirmable module with solidus_auth_devise ?

[joyboy67]

I enabled Devise's confirmable module by adding Spree::Auth::Config[:confirmable] = true to the config/initializers/spree.rb and configured a SMTP server in config/environments/development.rb :

  # SMTP Config
  config.action_mailer.raise_delivery_errors = true
  config.action_mailer.perform_caching = false
  config.action_mailer.delivery_method = :smtp
  config.action_mailer.perform_deliveries = true
  
  config.action_mailer.smtp_settings = {
	address: 'smtp.gmail.com',
	port: 465,
	domain: 'gmail.com',
	user_name: 'USERNAME', 
	password: 'PASSWORD',
	authentication: 'plain',
	ssl: true,
	tsl: true,
	enable_starttls_auto: true
  }

When I try to create a new user the email seems sent correctly, but the registration is anyway automatically validated ( flash_message = "Welcome! You have signed up successfully.") and the user redirected to the signup view without having to validate the confirmation link sent

Started POST "/signup" for 127.0.0.1 at 2022-09-10 13:35:27 +0200
Processing by Spree::UserRegistrationsController#create as TURBO_STREAM
  Parameters: {"authenticity_token"=>"[FILTERED]", "spree_user"=>{"email"=>"test@mail.com", "password"=>"[FILTERED]", "password_confirmation"=>"[FILTERED]"}}
  TRANSACTION (0.5ms)  BEGIN
  ↳ app/controllers/spree/user_registrations_controller.rb:17:in `create'
  Spree::User Exists? (1.0ms)  SELECT 1 AS one FROM `spree_users` WHERE `spree_users`.`email` = BINARY 'test@mail.com' LIMIT 1
  ↳ app/controllers/spree/user_registrations_controller.rb:17:in `create'
  Spree::User Create (1.3ms)  INSERT INTO `spree_users` (`encrypted_password`, `password_salt`, `email`, `remember_token`, `persistence_token`, `reset_password_token`, `perishable_token`, `sign_in_count`, `failed_attempts`, `last_request_at`, `current_sign_in_at`, `last_sign_in_at`, `current_sign_in_ip`, `last_sign_in_ip`, `login`, `ship_address_id`, `bill_address_id`, `created_at`, `updated_at`, `spree_api_key`, `authentication_token`, `unlock_token`, `locked_at`, `remember_created_at`, `reset_password_sent_at`, `deleted_at`, `confirmation_token`, `confirmed_at`, `confirmation_sent_at`, `unconfirmed_email`) VALUES ('ba371d6bb663d0051c815a709800729dc397b01cd62f0b0d2cf48b916dd240c3551f2ec5c12d38d38de736ad7b2710abcf6e59015a562ebeff99e4701bc6e5e9', 'h6MVZPFSHYpTPKqhyzxX', 'test@mail.com', NULL, NULL, NULL, NULL, 0, 0, NULL, NULL, NULL, NULL, NULL, 'test@mail.com', NULL, NULL, '2022-09-10 11:35:27.774795', '2022-09-10 11:35:27.774795', NULL, NULL, NULL, NULL, NULL, NULL, NULL, 'TBkysjP5QxJ7yQUjXfQc', NULL, '2022-09-10 11:35:27', NULL)
  ↳ app/controllers/spree/user_registrations_controller.rb:17:in `create'
  Spree::Role Load (1.2ms)  SELECT `spree_roles`.* FROM `spree_roles` INNER JOIN `spree_roles_users` ON `spree_roles`.`id` = `spree_roles_users`.`role_id` WHERE `spree_roles_users`.`user_id` = 8
  ↳ app/controllers/spree/user_registrations_controller.rb:17:in `create'
  TRANSACTION (1.0ms)  COMMIT
  ↳ app/controllers/spree/user_registrations_controller.rb:17:in `create'
  Spree::Store Load (1.4ms)  SELECT `spree_stores`.* FROM `spree_stores` WHERE `spree_stores`.`default` = TRUE ORDER BY `spree_stores`.`id` ASC LIMIT 1
  ↳ app/mailers/spree/user_mailer.rb:12:in `confirmation_instructions'
  Rendering spree/user_mailer/confirmation_instructions.text.erb
  Rendered spree/user_mailer/confirmation_instructions.text.erb (Duration: 6.8ms | Allocations: 310)
Spree::UserMailer#confirmation_instructions: processed outbound mail in 106.6ms
Delivered mail 631c7680beeb_f77a132e011626@computer.numericable.fr.mail (2092.3ms)
Date: Sat, 10 Sep 2022 13:35:28 +0200
From: store@example.com
To: test@mail.com
Message-ID: <631c7680beeb_f77a132e011626@computer.numericable.fr.mail>
Subject: Sample Store Confirmation instructions
Mime-Version: 1.0
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit

Welcome !

You can confirm your account email through the link below:

<a href="http://example.com/user/spree_user/confirmation?confirmation_token=TBkysjP5QxJ7yQUjXfQc">Confirm my account</a>
  Spree::Order Load (1.6ms)  SELECT `spree_orders`.* FROM `spree_orders` WHERE `spree_orders`.`completed_at` IS NULL AND `spree_orders`.`guest_token` = 'lZ0YQxjTzTlJ1LkXFEojDw' AND `spree_orders`.`user_id` IS NULL
  ↳ app/controllers/spree/user_registrations_controller.rb:19:in `create'
  TRANSACTION (7.5ms)  BEGIN
  ↳ app/controllers/spree/user_registrations_controller.rb:19:in `create'
  Spree::User Update (2.7ms)  UPDATE `spree_users` SET `spree_users`.`sign_in_count` = 1, `spree_users`.`current_sign_in_at` = '2022-09-10 11:35:30', `spree_users`.`last_sign_in_at` = '2022-09-10 11:35:30', `spree_users`.`current_sign_in_ip` = '127.0.0.1', `spree_users`.`last_sign_in_ip` = '127.0.0.1', `spree_users`.`updated_at` = '2022-09-10 11:35:30.201276' WHERE `spree_users`.`id` = 8
  ↳ app/controllers/spree/user_registrations_controller.rb:19:in `create'
  TRANSACTION (0.8ms)  COMMIT
  ↳ app/controllers/spree/user_registrations_controller.rb:19:in `create'
Redirected to http://localhost:3000/users/8
Completed 302 Found in 2583ms (ActiveRecord: 31.0ms | Allocations: 35687)


Started GET "/users/8" for 127.0.0.1 at 2022-09-10 13:35:30 +0200
  
ActionController::RoutingError (No route matches [GET] "/users/8"):
  
Started GET "/signup" for 127.0.0.1 at 2022-09-10 13:35:33 +0200
Processing by Spree::UserRegistrationsController#new as HTML
  Rendering layout spree/layouts/spree_application.html.erb
  Rendering spree/user_registrations/new.html.erb within spree/layouts/spree_application
  Rendered /usr/local/lib/ruby/gems/3.1/gems/solidus_core-3.2.0/app/views/spree/shared/_error_messages.html.erb (Duration: 0.3ms | Allocations: 51)
  Rendered spree/user_registrations/new.html.erb within spree/layouts/spree_application (Duration: 6.4ms | Allocations: 1214)
  Spree::Store Load (0.8ms)  SELECT `spree_stores`.* FROM `spree_stores` WHERE (`spree_stores`.`url` = 'localhost' OR `spree_stores`.`default` = TRUE) ORDER BY `spree_stores`.`default` ASC LIMIT 1
  ↳ app/views/spree/layouts/spree_application.html.erb:5
  Spree::Taxon Load (0.9ms)  SELECT `spree_taxons`.* FROM `spree_taxons` WHERE `spree_taxons`.`parent_id` IS NULL ORDER BY lft
  ↳ app/views/spree/shared/search/_search_bar.html.erb:6:in `map'
  Rendered spree/shared/search/_search_bar.html.erb (Duration: 8.6ms | Allocations: 1256)
  Spree::User Load (0.8ms)  SELECT `spree_users`.* FROM `spree_users` WHERE `spree_users`.`deleted_at` IS NULL AND `spree_users`.`id` = 8 ORDER BY `spree_users`.`id` ASC LIMIT 1
  ↳ app/views/spree/layouts/_top_bar.html.erb:10
  Rendered spree/layouts/_top_bar.html.erb (Duration: 34.7ms | Allocations: 4522)
  Spree::Taxonomy Load (0.6ms)  SELECT `spree_taxonomies`.* FROM `spree_taxonomies` ORDER BY `spree_taxonomies`.`position` ASC LIMIT 1
  ↳ app/views/spree/layouts/_header.html.erb:7
  Spree::Taxon Load (0.9ms)  SELECT `spree_taxons`.* FROM `spree_taxons` WHERE `spree_taxons`.`parent_id` IS NULL AND `spree_taxons`.`taxonomy_id` = 1
  ↳ app/views/spree/layouts/_header.html.erb:7
  Spree::Taxon Load (0.9ms)  SELECT `spree_taxons`.* FROM `spree_taxons` WHERE `spree_taxons`.`parent_id` = 1 ORDER BY lft
  ↳ app/views/spree/layouts/_header.html.erb:7
  Rendered spree/layouts/_header.html.erb (Duration: 69.2ms | Allocations: 8245)
  Rendered spree/layouts/_footer.html.erb (Duration: 15.5ms | Allocations: 3566)
  Rendered layout spree/layouts/spree_application.html.erb (Duration: 242.1ms | Allocations: 36280)
Completed 200 OK in 254ms (Views: 238.6ms | ActiveRecord: 5.0ms | Allocations: 38655)

[joyboy67]

I found the response at my question

https://github.com/solidusio/solidus_auth_devise/blob/master/config/initializers/devise.rb

  # ==> Configuration for :confirmable
  # The time you want to give your user to confirm his account. During this time
  # he will be able to access your application without confirming. Default is nil.
  # When confirm_within is zero, the user won't be able to sign in without confirming.
  # You can use this to let your user access some features of your application
  # without confirming the account, but blocking it after a certain period
  # (ie 2 days).
  # config.confirm_within = 2.days