CODEWITHSUNDEEP
emailparse-platformverification
Parad0x13
Parad0x13

Reputation: 2065

Parse set User email verification to true manually

So it appears when you create a User in Parse you cannot manually set their activation as True, rather you have to authenticate the account by email.

This is a problem if you are switching an existing database to Parse since you wouldn't want every user to recreate their account. Is there a way to force the emailVerified to True?

Thanks!

Upvotes: 2

Views: 2253

Answers (1)

soulshined
soulshined

Reputation: 10602

There is an option on your parse dashboard to enable/disable this feature on the users end http://blog.parse.com/2012/04/03/introducing-app-email-settings/. Otherwise it defeats the purpose and intent of security for users if you manually override it. It would be cool for someone else to use my email they retrieved from a phishing scam latter to find out it was approved by devs of an app I haven't even used.

EDIT Per our discussion below;

As an admin, you can not set any objects emailVerified set to true or false for security reasons, and before you dig deep into Parse, a user can't alter another users information either. Some alternatives you can consider:

Users which were created before email verification was on or which were created without an email will not have the emailVerified key

  • So in other words, you can import a CSV/JSON file of your old database and leave the emailVerified undefined, which won't prompt anything on the users end, except when they request a password reset or other circumstantial events. However, you can always check if an emailVerified field is set to true for any object at any time and act accordingly.
  • You can post an updated privacy policy and have them update their information and reverify at that time, even though you specifically stated you don't want to go this avenue. But as databases change, so should privacy policies.
  • The only time, when using Parse that is, the boolean value of emailVerified will change is once the user clicks on the link sent to their email. A last resort would be send a mass email to all users, this isn't as far fetched an option, many companies have users reverify emails.

Upvotes: 1

Related Questions