[ENH] Administrator Ability For Email Confirmation for Self-Registered Users

[thabaum]

Oqtane Info

Version - 6.0.0
Render Mode - Static
Interactivity - Server
Database - SQL Server

Describe the enhancement

Add an administrative feature to confirm the email address of self-registered users in the AspNetUsers database. This enhancement would allow administrators to set the EmailConfirmed field for users who registered themselves.

Background:

Currently, users who self-register may not have their email addresses confirmed due to SMTP issues or junk mail lost. This can lead to issues with account security and communication. An admin feature to manually confirm these email addresses would enhance user management.

Proposed Solution:

1. Admin Interface:

   • Create a dedicated section in the admin panel to view self-registered users who have not confirmed their email.
   • Include an option to manually confirm their email addresses.

2. Database Update:

   • Upon confirmation, update the EmailConfirmed field in the AspNetUsers table to true.

3. Notification:

   • Optionally, send a notification to the user confirming their email address has been validated by an admin.

4. Resend Email Verification Notification

   • Optionally, have a link to resend the email verification link to the user that registered instead of manual confirmation.
   • Also if a user has tried to log in, a link in the error message to resend the link.

Benefits:

• Improves account security by ensuring that all users have verified email addresses.
• Enhances administrative control over user management.
• Helps maintain the integrity of the user base.

Additional Considerations:

• Ensure that appropriate permissions are set for admin users to access this feature.
• Consider logging changes made to user email confirmation status for auditing purposes.