Put offer to reset email behind a feature flag
What does this MR do and why?
Put the one-time offer to update an email during email verification behind a by-default disabled feature flag.
References
Issue: https://gitlab.com/gitlab-sirt/shared-incidents/incident_6749/-/work_items/14
Screenshots or screen recordings
Before | After |
---|---|
![]() |
![]() |
How to set up and validate locally
- Login as admin and visit the sign in settings
- Verify
Require email verification when account is locked.
is checked - Find a test user
- Verify in console the user has
email_reset_offered_at
set to nil - Try to sign in the user with a wrong password 3 times
- Try to sign in the user with a correct password
- Verify the
Update email
button is not shown -
Enable the
offer_email_reset
feature flag - Refresh and verify the
Update email
button is now shown again
MR acceptance checklist
Evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Edited by Alex Buijs