KamoCRM

mkopaji inathibitisha barua pepe yao kabla ya tovuti inafungua akaunti yao

FixSecurityService
Shipped
13 Novemba 2026, 08:16 UTC
Author
Kamo
Commit
b6b8812

portal mkopaji alama kila anwani typed kuthibitishwa juu ya kujiandikisha-up na alituma kitu anwani mara mbili inathibitisha kutamka, si mailbox — na kumiliki akaunti inaonyesha mikopo yake, hivyo kuchukua juu ya akaunti ya kumiliki anwani (sasa imefanyika na **************** kamo-shared-library a6d39dc5) lazima mapumziko juu ya ushahidi. - / portal / akaunti / kujiandikisha tena alama anwani kuthibitishwa. Mara baada ya kujiandikisha-up ahadi, nambari sita-digit huenda kwa hiyo, katika jina la mkopaji, na kiungo nyuma ya portal mkopaji (https://myloan.<lender uwanja>/kuthibitisha-e-mail? t =…) badala ya Kamo kusajiliwa mwenyeji. - /portal/account/verify {email, code}: kanuni. Kanuni tano mbaya saa kwa mtu (CodeAttemptLimiter) - 429 na retryAfterSeconds baada ya kwamba. - /portal/account/verify/resend {email}: kanuni safi; VerificationResendRateLimiter; majibu ya sawa ambaye anashikilia anwani, na kamwe barua tayari-kuthibitishwa moja. - /portal/account/verify-token {token}: kiungo barua. - / portal/account/kuandaa-signin majibu verificationRequired:kweli (na barua pepe kanuni) kwa mtu ambaye kamwe kuthibitisha anwani yao, hivyo portal anauliza kwa ajili ya kanuni kabla ya kuingia. - Hakuna Kamo "karibisho kwa nafasi ya kazi" barua kwa mkopeshaji portal (EmailVerificationService sendWelcome = overloads uongo; kila anayeita zilizopo unchanged). - **************** wajumbe accountForMember: kuthibitishwa mkopaji inachukua juu ya akaunti unaowned kushika anwani yao (mfano mmoja Arive mkopo sync alifanya); vinginevyo akaunti yao wenyewe, kama kabla. Unguarded-endpoint msingi: kuthibitisha, kutuma tena, verifyToken ni umma kwa kubuni (hakuna kikao bado), orodha na sababu.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing