[DOCS-15568] Add a note specifying that email confirmation for authentication is not meant for production Created: 24/Aug/22  Updated: 04/Jan/23  Resolved: 09/Sep/22

Status: Closed
Project: Documentation
Component/s: Realm
Affects Version/s: None
Fix Version/s: None

Type: Task Priority: Major - P3
Reporter: Josman Perez Exposito Assignee: Chris Bush
Resolution: Done Votes: 0
Labels: authentication
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Participants:
Days since reply: 1 year, 24 weeks ago
Story Points: 1

 Description   

There are currently three ways to authenticate a user.

  • Automatically confirm users: This will allow you to automatically register users without needing to do any other process for the user.
  • Send a confirmation email: This method is designed for development as the email sent will have the MongoDB address and logo in it (and cannot be configured/changed at the moment)
  • Run a confirmation function: This will run a function in your App Services application to immediately confirm the user or requires additional confirmation. Please be aware that confirmation must come from the client's application.

However, "Send a confirmation email" is not recommended for production applications for one main reason, and that is that it cannot be customised. Thus:

  1. Emails are always sent from "mongodb.com", which is not optimal for a production application.
  2. The image included in the email has a broken link and cannot be displayed.

This is corroborated by the product team. https://jira.mongodb.org/browse/PRODTRIAGE-2559

The reason for creating this ticket is if you can please add a disclaimer specifying this so that users are already aware of this limitation.


Generated at Thu Feb 08 08:13:16 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.