How to handle email verification after a new user created?

[Zhenlei Li, geändert vor 8 Jahren.]

I am working on v6.2CE.
created a customized self-registration portlet, inside this portlet:
UserServiceUtil.addUserWithWorkflow(......) API to create a new user with fixed password, and then
UserLocalServiceUtil.sendEmailAddressVerification(newUser, newUser.getEmailAddress(), serviceContext);

I am hoping - the new user shouldn't be actived immediately, the new user has to follow the verification email to response to liferay portal by entering the verification-code, after that the portal active the account automatically.

But the actual result is NOT! the new user can enter the liferay portal immediately with correct email/password.

Can anybody explain to me - what's the proper way let the verification email active the new account rather than the new account woking at once?

Thank you

[David H Nebinger, geändert vor 8 Jahren.]

I guess you could hook the login portlet to see if they've completed verification before letting them in... A pre login action could throw an exception, but that won't give you a visual cue as to what is necessary.

[Samuel Kong, geändert vor 8 Jahren.]

In Control Panel > Configuration > Portal Settings > Authentication,
is "Require strangers to verify their email address" checked?

[Zhenlei Li, geändert vor 8 Jahren.]

Samuel Kong:

In Control Panel > Configuration > Portal Settings > Authentication,
is "Require strangers to verify their email address" checked?

Hi Samuel, thank you for the reply.

I am using Liferay Portal Community Edition 6.2 CE GA2 ,
could not find the configuraton to turn on/off "Require strangers to verify their email address".
There is a setting about - Require all users to verify their email address, got really worse experience after I ticked it!
The portal required evereybody to verify email address, otherwise, no way to enter portal.

[Samuel Kong, geändert vor 8 Jahren.]

Zhenlei Li:

There is a setting about - Require all users to verify their email address, got really worse experience after I ticked it!
The portal required evereybody to verify email address, otherwise, no way to enter portal.

After you check "Require all users to verify their email address", the portal will not allow users to sign in unless the "emailAddressVerified" field for the user is set to true. If you want to require some users to verify their email address but not others, than you'll need to update the user's "emailAddressVerified" property to true when their account is created.

[Zhenlei Li, geändert vor 8 Jahren.]

David H Nebinger:

I guess you could hook the login portlet to see if they've completed verification before letting them in... A pre login action could throw an exception, but that won't give you a visual cue as to what is necessary.

A good solution David!
BTW, how to know the new user reply liferay with proper verification-code already? I didn't find this kind of API so far.
If we can detect that new user send back the correct verification-code, then we can define a scheduled job to active the user.

Thank you

[David H Nebinger, geändert vor 8 Jahren.]

It should be based upon the User status member value. This is a workflow value so you should be able to check for the right (or wrong) value(s) and make appropriate decisions.

[Zhenlei Li, geändert vor 8 Jahren.]

David H Nebinger:

It should be based upon the User status member value. This is a workflow value so you should be able to check for the right (or wrong) value(s) and make appropriate decisions.

Will try, thank you again.