Wrong error when adding an invalidated email
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical SSO provider |
Invalid
|
Low
|
Unassigned |
Bug Description
When I'm adding an email to my account that was invalidated, I get an error saying:
"Email already associated with account."
That's true, but misleading. It would be better if we display the same message that appears when I try to log in with the invalidated email:
"This email address has been invalidated. Please contact login support."
And may I add that this message is incomplete. It would be better to say something like:
"This email address has been invalidated. Please double-check that it's yours, and then contact login support."
To reproduce:
Log in.
Go to https:/
add an email
Go to the inbox and click the invalidate link.
Log in again.
Go to https:/
Add the same email.
Changed in canonical-identity-provider: | |
status: | Confirmed → New |
Changed in canonical-identity-provider: | |
assignee: | Canonical ISD hackers (canonical-isd-hackers) → kamil (gogolczyk2) |
status: | New → Incomplete |
tags: |
added: u1- removed: u1-on-production |
Changed in canonical-identity-provider: | |
assignee: | kamil (gogolczyk2) → nobody |
Changed in canonical-identity-provider: | |
status: | Incomplete → Invalid |
The intention is that if *someone else* should *be able* to add an email to their account that has been invalidated on another account (otherwise you can prevent someone from using their own email address). This has not yet been implemented - so the current "problem" is expected behaviour until the right behaviour is put in place.
I think this is the situation you are talking about anyway. (Or are you talking about re-adding an invalidated email address - which shouldn't be possible and could almost certainly have a better error message.)