* security: require verified email for client signups * security: load verified-email auth guard * test: include auth security guard in deploy checks * test: guard verified-email signup flow * security: remove client-controlled email autoconfirm triggers
13 lines
489 B
PL/PgSQL
13 lines
489 B
PL/PgSQL
-- Caterium v17.7.4: require real Supabase email verification for client-created accounts.
|
|
-- The removed triggers trusted raw_user_meta_data.registration_source, which is client-controlled.
|
|
|
|
begin;
|
|
|
|
drop trigger if exists caterium_autoconfirm_signup_v25 on auth.users;
|
|
drop trigger if exists caterium_autoverify_identity_v25 on auth.identities;
|
|
|
|
drop function if exists public.caterium_autoconfirm_signup_v25();
|
|
drop function if exists public.caterium_autoverify_identity_v25();
|
|
|
|
commit;
|