mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2025-12-10 17:23:04 +03:00
Change email of an account #2355
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @blacs30 on GitHub.
I am running the latest tag of mprasil's bitwarden docker image.
When I want to change my email address I get asked to enter a code that is supposedly sent to me via mail.
I don't a receive a mail and on the missing features email is listed so I don't expect mails.
Question:
Is there a way to change the accounts email addres?
@krankur commented on GitHub:
Not sure if I understand the above conversation fully. As per my understanding, if the user wants to change their email, they need to:
On clicking "Continue", the server API that is called (
api/accounts/email-token), should update the email. But this doesn't seem right, as the user will be asked to enter the code on clicking "Continue", which will cause confusion. So, am I missing something here?@blacs30 commented on GitHub:
From my perspective (user and admin of that bitwarden instance) a direct change would be acceptable.
If I would host an instance for a lot of people and it's more publicly accessible then an email verification code would make sense for security reasons but I understand that this would be a complete different dimension of time and code.
@mprasil commented on GitHub:
There is a handler
post_email_tokenthat handles this, it seems to verify your password and some other stuff, but it doesn't really change anything. We need to implement that maybe. We don't have email sending functionality so I guess we could just change it straight away?@mprasil commented on GitHub:
@krankur you're right it's going to be confusing, but the suggested way to go about it (without implementing and requiring SMTP) would be to just change the email straight away as it is sent and ignore the token part completely.Sure, people will be confused, but at least the email is changed.
@mprasil commented on GitHub:
Well we don't use that email for anything at all really. It's more like an username and bitwarden_rs wouldn't even mind if it wasn't valid email address. So I guess there's little harm in not validating it other than one user can "steal" the account with his email if such email wasn't already registered.
If we decide to just change the email here, it should be pretty simple change.
@mprasil commented on GitHub:
Documentation has been added in #133. I'm going to resolve this. If anyone feels like they need to get the token via email, please file a separate issue.
@mprasil commented on GitHub:
Okay, so it turns out this was already implemented. (without the email verification)
When you want to change your email, you just need to enter any random token when prompted. We should probably document this functionality.