fix: Add 'session_bound=False' for the skey during email verification (…

…#810)
viur-framework · Aug 14, 2023 · 9465ab2 · 9465ab2
1 parent 9e6d95e
commit 9465ab2
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/viur/core/modules/user.py b/src/viur/core/modules/user.py
@@ -515,7 +515,8 @@ def add(self, *args, **kwargs):
         skel.toDB()
         if self.registrationEmailVerificationRequired and skel["status"] == Status.WAITING_FOR_EMAIL_VERIFICATION:
             # The user will have to verify his email-address. Create a skey and send it to his address
-            skey = securitykey.create(duration=60 * 60 * 24 * 7, userKey=utils.normalizeKey(skel["key"]),
+            skey = securitykey.create(duration=60 * 60 * 24 * 7, session_bound=False,
+                                      userKey=utils.normalizeKey(skel["key"]),
                                       name=skel["name"])
             skel.skey = BaseBone(descr="Skey")
             skel["skey"] = skey