Documentation states that when registering a user via web SDK, the user will have to be confirmed before they can sign in; either by auto confirmation of custom confirmation function.
This is broken.
When I register a user via app.emailPasswordAuth.registerUser({ email })
- The custom confirmation function completes returning ‘success’
- An email is sent to the use, from my own smtp server, containing the token generated by App Services.
The problem is that the user can immediately login, without confirming via the token in the email sent.
This did work correctly about a year ago, that was when I last tested Auth Flow.
I am using realm-web v2.0.1, but I went back to v1.7.1 which was the last version that I was using when the Auth Flow worked as expected, but still broken now.