Single opt-in form re-activates unsubscribed, bounced, and complained contacts #31

New issue

Closed

opened 2026-10-15 01:18:30 -04:00 by vmanne-poc · 0 comments

vmanne-poc commented

2026-10-15 01:18:30 -04:00

Owner

Bug. Submitting a single opt-in form for an existing contact sets the contact to ACTIVE whatever its current status. The public submit endpoint has no captcha or authentication, so anyone can re-subscribe an address that unsubscribed, hard-bounced, or marked our mail as spam. This conflicts with the code comment ("never silently re-activate") and with unsubscribe compliance.

Fix

Single opt-in only creates new contacts and updates the names of ACTIVE contacts.
UNSUBSCRIBED, BOUNCED and COMPLAINED contacts keep their status.
The response stays the same, so the form doesn't reveal anyone's status.
To come back, a person uses a double opt-in form, where the confirmation email proves they own the address.

Done when

An e2e test covers each status with single opt-in.

**Bug.** Submitting a single opt-in form for an existing contact sets the contact to ACTIVE whatever its current status. The public submit endpoint has no captcha or authentication, so anyone can re-subscribe an address that unsubscribed, hard-bounced, or marked our mail as spam. This conflicts with the code comment ("never silently re-activate") and with unsubscribe compliance. **Fix** - Single opt-in only creates new contacts and updates the names of ACTIVE contacts. - UNSUBSCRIBED, BOUNCED and COMPLAINED contacts keep their status. - The response stays the same, so the form doesn't reveal anyone's status. - To come back, a person uses a double opt-in form, where the confirmation email proves they own the address. **Done when** - An e2e test covers each status with single opt-in.

vmanne-poc added this to the Phase 9.5: Project workspace UI milestone

2026-10-15 01:18:30 -04:00

vmanne-poc added the

security

bug

labels

2026-10-15 01:18:30 -04:00

vmanne-poc referenced this issue from a commit

2026-10-15 07:43:31 -04:00

Single opt-in forms no longer re-activate opted-out contacts

vmanne-poc referenced this issue from a pull request that will close it,

2026-10-15 07:48:49 -04:00