caterium-app/ops/sql/SUPABASE-V17.7.4-AUTH-EMAIL-VERIFICATION.sql
pavlov346346-source 736e551369
Security: require verified email for signup
* security: require verified email for client signups

* security: load verified-email auth guard

* test: include auth security guard in deploy checks

* test: guard verified-email signup flow

* security: remove client-controlled email autoconfirm triggers
2026-09-11 07:27:37 +03:00

13 lines
489 B
PL/PgSQL

-- Caterium v17.7.4: require real Supabase email verification for client-created accounts.
-- The removed triggers trusted raw_user_meta_data.registration_source, which is client-controlled.
begin;
drop trigger if exists caterium_autoconfirm_signup_v25 on auth.users;
drop trigger if exists caterium_autoverify_identity_v25 on auth.identities;
drop function if exists public.caterium_autoconfirm_signup_v25();
drop function if exists public.caterium_autoverify_identity_v25();
commit;