Skip to content

Require email verified user for phone verification endpoints

Eugie Limpin requested to merge el-require-email-for-phone-verification into master

What does this MR do and why?

Related to https://gitlab.com/groups/gitlab-org/modelops/anti-abuse/-/epics/30

Follow-up to Reverse the order of identity verification steps (!137513 - merged)

With Reverse the order of identity verification steps (!137513 - merged) users are now required to verify their email first before they can see the phone verification step (and subsequently the CC verification step). In this MR, we ensure users are required to verify a phone number and they are email verified first before they can hit the phone verification endpoints.

Screenshots or screen recordings

Before After

How to set up and validate locally

See https://gitlab.com/groups/gitlab-org/modelops/anti-abuse/-/epics/30#note_1663160775

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Eugie Limpin

Merge request reports