Skip to content

Expand the Devise unconfirmed message

What does this MR do?

Previously when a user with an un-confirmed email address attempted to sign in, a very brief error message was returned: "You have to confirm your email address before continuing." This did not explain what users should do to fix the problem, and left some users baffled. This MR expands the text to explain what the user should do next, and also what to do if that doesn't work: "You have to confirm your email address before continuing. Please check your email for the link we sent you, or click 'Forgot your password' to send a new email."

Note: The "Resend confirmation email" link only appears if unconfirmed_email? after an attempted sign-in.

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Related to #29279 (closed)

Edited by Chad Woolley

Merge request reports