Summary
Users are unable to verify their email address, because the system does not send a verification email–leaving them locked out of their accounts.
Steps to reproduce
| # | Steps | |
|---|---|---|
| 1. | Using the latest Mattermost version (self-hosted, up-to-date as of 06/18/2025 v10.9.1), create a new user account as the admin or update an email address that still requires verification. | |
| 2. | Login on a different device using the username/email and password. This triggers the email verification process. | |
| 3. | Wait for the verification email to arrive. | |
| 4. | Check server logs for email activity. |
Expected behavior
After a user requests a verification email, the system should attempt to send it, and a corresponding log entry should appear. The user should receive the email and be able to complete verification.
Observed behavior
The device displays the text “You’re almost done! Please verify your email address. Check your inbox for an email.”
- No verification email is received by the user (spam included).
- The server logs show no attempt to send the email, leaving the user locked out and unable to proceed.
Note that below are images of the UI after entering a correct username and password and the corresponding log. I first entered an incorrect password (but correct username) and received the log entry, then I entered a correct username and password combination and received the “You’re almost done!” prompt. No email was sent as part of this process.
