Skip to content

Use the same email validation for User and Email

Magdalena Frankiewiczrequested to merge
use-same-email-validation-on-users-and-emails into master

Related to #348947 (closed)

Use the same email validation for User and Email. Otherwise, it is possible to successfully save a primary User email, but fail to add it to user.emails because it is invalid for the Email model.

The Email#email validation is now more relaxed, and the same as the User#email validation: it is the Devise email validation, that basically only checks that there is a single @ sign separating local part and domain. The previous stricter Email#email validation was enforcing compliance with RFC3696, but many mail servers allow addresses that are not fully compliant with the RFC. Therefore, the relaxed validation is preferable, to avoid blocking working email addresses.

See also this comment.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Magdalena Frankiewicz

Merge request reports