Hello, I’ve been trying to implement Pow in my phoneix project. So far everything was working fine, till I tried to deny authorization to unconfirmed emails.

The code for confirming email is as follows:

def show(conn, %{"id" => token}) do
    case PowEmailConfirmation.Plug.load_user_by_token(conn, token) do
      {:error, conn} ->
        conn
        |> put_status(401)
        |> json(%{error: %{status: 401, message: "Invalid confirmation code"}})

      {:ok, conn} ->
        case PowEmailConfirmation.Plug.confirm_email(conn, %{}) do
          {:ok, _, conn} ->
            conn
            |> json(%{success: %{message: "Email confirmed"}})

          {:error, _, conn} ->
            conn
            |> put_status(401)
            |> json(%{error: %{status: 401, message: "Invalid confirmation code"}})
        end
    end
  end

The email confirmation is working fine as it can be seen from the following:

  #Dakpeon.Users.User<
    __meta__: #Ecto.Schema.Metadata<:loaded, "users">,
    address: nil,
    company_name: nil,
    completion_status: false,
    email: "test1@example.com",
    email_confirmation_token: nil,
    email_confirmed_at: ~U[2021-12-20 15:25:29Z],
    first_name: nil,
    id: 5,
    inserted_at: ~N[2021-12-20 15:23:43],
    last_name: nil,
    role: "user",
    unconfirmed_email: nil,
    updated_at: ~N[2021-12-20 15:25:29],
    wallet: #Ecto.Association.NotLoaded<association :wallet is not loaded>,
    ...
  >

But the problem is whenever I call PowEmailConfirmation.Plug.email_unconfirmed?/1 I always get false. For now, I was just trying to see the output of Plug.email_unconfirmed?/1 because my logic didn’t work and that confused me.

  def create(conn, %{"user" => user_params}) do
    conn
    |> PowEmailConfirmation.Plug.email_unconfirmed?()
    |> IO.inspect()

    conn
    |> Pow.Plug.authenticate_user(user_params)
    |> case do
      {:ok, conn} ->
        json(conn, %{data: %{access_token: conn.private.api_access_token, renewal_token: conn.private.api_renewal_token}})

      {:error, conn} ->
        conn
        |> put_status(401)
        |> json(%{error: %{status: 401, message: "Invalid email or password"}})
    end
  end

Following is the output of a test user.

[debug] Processing with DakpeonWeb.API.V1.SessionController.create/2
  Parameters: %{"user" => %{"email" => "test3@example.com", "password" => "[FILTERED]"}}
  Pipelines: [:api]
false
[debug] QUERY OK source="users" db=3.6ms idle=1476.6ms
SELECT u0."id", u0."first_name", u0."last_name", u0."address", u0."company_name", u0."role", u0."completion_status", u0."unconfirmed_email", u0."email_confirmed_at", u0."email_confirmation_token", u0."password_hash", u0."email", u0."inserted_at", u0."updated_at" FROM "users" AS u0 WHERE (u0."email" = $1) ["test3@example.com"]

The user details:

  #Dakpeon.Users.User<
    __meta__: #Ecto.Schema.Metadata<:loaded, "users">,
    address: nil,
    company_name: nil,
    completion_status: false,
    email: "test3@example.com",
    email_confirmation_token: "a31b635c-90b2-4cd7-b702-8f16afcf3b60",
    email_confirmed_at: nil,
    first_name: nil,
    id: 7,
    inserted_at: ~N[2021-12-27 08:53:56],
    last_name: nil,
    role: "user",
    unconfirmed_email: nil,
    updated_at: ~N[2021-12-27 08:53:56],
    wallet: #Ecto.Association.NotLoaded<association :wallet is not loaded>,
    ...
  >

This calling the email_unconfirmed?/1 function on this data should return true, according to the source code.

also, another user whose email is confirmed: (not including the user struct, cause it’s been provided before in this post)

[debug] Processing with DakpeonWeb.API.V1.SessionController.create/2
  Parameters: %{"user" => %{"email" => "test1@example.com", "password" => "[FILTERED]"}}
  Pipelines: [:api]
false
[debug] QUERY OK source="users" db=2.2ms idle=1713.9ms
SELECT u0."id", u0."first_name", u0."last_name", u0."address", u0."company_name", u0."role", u0."completion_status", u0."unconfirmed_email", u0."email_confirmed_at", u0."email_confirmation_token", u0."password_hash", u0."email", u0."inserted_at", u0."updated_at" FROM "users" AS u0 WHERE (u0."email" = $1) ["test1@example.com"]
[info] Sent 200 in 971ms

I’m completely lost. why it’s always returning false, is beyond my understanding. Any suggestion will be helpful!

Thanks!