extant2000/flamenet-relay
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases Wiki Activity

Warn that FN_EMAIL_VERIFICATION_REQUIRED locks out Android #214

Merged
paulhitt merged 1 commits from docs/android-cannot-finish-verification into main 2026-09-22 11:44:42 +00:00
Conversation 2 Commits 1 Files Changed 2
+20 -1
paulhitt commented 2026-09-22 10:50:10 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

The relay refuses to mint a device token for an account with an
unverified address, email_unverified 403, with a sentence telling the
person to enter the code. iOS shows that sentence and a sheet to enter
it in: SignInView branches on the code and VerifyEmailSheet spends
it through AuthService.verifyEmail.

Android maps the refusal to RelayException.EmailUnverified, which is
constructed in two places and caught in none, and
RelayAccounts.verifyEmail has no call site anywhere in
*/src/main/*.kt. An Android user signs up, is refused, and has no
screen that takes the code.

Off by default and not set in production, so nothing is broken today.
It is a trap for the first self-hoster who turns it on, and the
configuration page is where they would look.

Co-Authored-By: Claude Opus 5 noreply@anthropic.com

The relay refuses to mint a device token for an account with an unverified address, `email_unverified` 403, with a sentence telling the person to enter the code. iOS shows that sentence and a sheet to enter it in: `SignInView` branches on the code and `VerifyEmailSheet` spends it through `AuthService.verifyEmail`. Android maps the refusal to `RelayException.EmailUnverified`, which is constructed in two places and caught in none, and `RelayAccounts.verifyEmail` has no call site anywhere in `*/src/main/*.kt`. An Android user signs up, is refused, and has no screen that takes the code. Off by default and not set in production, so nothing is broken today. It is a trap for the first self-hoster who turns it on, and the configuration page is where they would look. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
paulhitt commented 2026-09-22 10:50:10 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

assigned to @paulhitt

assigned to @paulhitt
paulhitt (Migrated from gitlab.com) merged commit 7d16105f35 into main 2026-09-22 11:44:42 +00:00
paulhitt commented 2026-09-22 11:44:45 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit 7d16105f35

mentioned in commit 7d16105f35a3b38204abe85e0724f8ab18a2c6b8
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
accuracy
A public page claims something the code does not do
 architecture
blocked:apple
Waiting on App Store review
 bug
ci
deploy
docs
federation
hardening
idea
investigation
ops
Deploy, CI, infrastructure
 parity
One platform has it and the other does not
 planning
privacy
Changes what is stored, or what we say is stored
 reliability
scalability
security
self-hosting
signup
stability
tech-debt
tooling
unwired
Built in the engine, not reachable from the UI
 verification
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
extant2000git
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: extant2000/flamenet-relay#214