sendVerificationEmail bug?
What will happen if run sendVerificationEmail to email that not registered?
because i already tried and it return success
2 Replies
If there is no active session and the email does not belong to an existing user (which i am assuming is the case), then calling the sendVerificationEmail will always return true.
In the library you will find the following reasoning in email-verification.ts
"//we're returning true to avoid leaking information about the user"