How to do an email check/confirmation/validation with Phoenix?

Have you looked at the Coherence package? It has a Confirmable module that is designed to confirm email addresses.

Haven’t come across it, no. I’ll check it out. Thanks!

Coherence is a full login library, you’d probably want something like just a mailer like mailer or any of the others or so.

Yeah I was struggling a bit… I have a basic login and it works well, so I’m thinking of adding the missing bits instead of throwing it all out and go with a full library.

I’ve used bamboo [0] with mailgun and it worked well for me. There are a few tutorials about it [1][2], it integrates well into phoenix and has pretty good docs.

[0] bamboo | Hex
[1] https://thoughtbot.com/upcase/videos/elixir-and-phoenix-in-production
[2] Sending Email via SMTP with Elixir Phoenix – lpil.uk

openmaize is a simple enough library to understand it’s working. @riverrun has also made an [example application] (https://github.com/riverrun/openmaize-phoenix-example) to showcase it’s usage.

If you plan to DIY you will find a lot of inspiration in those two repos.

I used gen_smtp with a sengrid-account.

Just want to add, because you said that you are rather new to the programming world…

The basic flow of confirming email address is as follows:

1. User registered into your app

2. Your app inserts the user into the DB (perhaps table accounts or something) with a verified field set to false or 0

3. Your app generates a verify token (usually some random string), and

• inserts it into a database (another table, such as verify_tokens) and the associated user ID

• constructs a verify link with the token and send it to the user (might also want to include the user ID in it)

4. The user receives the email and clicks on the link

5. In the handler, your app will:

• check the request params and look up for a verify token belonging to the user ID in the DB and

• if found, update the verified field of your user on table accounts

I hope that makes sense!

I will recommend email_checker. It’s quite straightforward to use.

That one is very hard to proof… Double-Opt-In does only prrof that the person registering also has at least reading access to the given email account.