core's registration workflow is woefully behind the times.

drupal 5.x saw the addition of user created passwords, but unfortunately it did not take the necessary extra step to provide some other means of validating a user's existence (opening the door wide to spambot registrations when this feature is enabled).

this is evidenced by the fact that the LoginToboggan module consistently ranks in the top 50-100 contributed modules. it's cornerstone feature, an email validation workflow addition, is something that in this day and age certainly belongs in core.

so, i'd like to propose that LoginToboggan's email validation workflow (or something like it) be added to core.

Comments

efarseer’s picture

efarseer commented

I support this.

Leeteq’s picture

Leeteq commented
Priority: Normal » Major

There is a correlation between the importance of this request and the strangeness that this is not already in core looong ago.

Everett Zufelt’s picture

Everett Zufelt commented
Priority: Major » Normal

Isnt the fact that we have gotten along w/o this in Core a good reason to keep it normal?

I'd be happy to review a patch should one get rolled.

Leeteq’s picture

Leeteq commented

#3: that is a logic that suggest that something cannot grow more important over time, which sounds strange.
When others chime in here, we will notice if there is more demand for this now.

rafamd’s picture

rafamd commented

Well yes, a revamp of the login workflow would be a nice thing to do. I'm coming from this issue #1176728: Integration with LoginTobbogan where an interesting point is rised: "I think it would be more useful for someone to create a Login Frame that all login type modules would build off of. Sort of like Voting API that all vote-type modules are dependent on."

We should try to identify other login-related modules requirements and provide a friendly way to interact.

fenda’s picture

fenda commented

I would also like to see updates to the login workflow. I think Logintoboggan does too many things that we don't need in core.

However, the typical process I would like to be able to have my users follow:

  1. Go to register account form
  2. Fill in at least username, email address, password
  3. Click email verification link
  4. Logged in

It would also be nice to have an on/off setting that automatically logs in users after registration, but still requires them to verify their email at some point.

Rob C’s picture

Rob C commented
Status: Active » Closed (duplicate)

Sounds like a duplicate of #115801: Allow password on registration without disabling e-mail verification Closing. 115801 contains more up to date information and a patch.

And Logintoboggan isn't alone anymore, see > http://drupal.org/project/user_registrationpassword for D7.