caterium/caterium-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security: remove client-controlled email autoconfirm triggers

Browse Source
This commit is contained in:
pavlov346346-source 2026-09-11 07:18:59 +03:00
parent 3a02660511
commit 47fa747c93
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
ops/sql/SUPABASE-V17.7.4-AUTH-EMAIL-VERIFICATION.sql Normal file
View File

@ -0,0 +1,12 @@
-- Caterium v17.7.4: require real Supabase email verification for client-created accounts.
-- The removed triggers trusted raw_user_meta_data.registration_source, which is client-controlled.
begin;
drop trigger if exists caterium_autoconfirm_signup_v25 on auth.users;
drop trigger if exists caterium_autoverify_identity_v25 on auth.identities;
drop function if exists public.caterium_autoconfirm_signup_v25();
drop function if exists public.caterium_autoverify_identity_v25();
commit;