PreUserRegistration Action (using Passwordless) not setting user metadata

[rueben.tiow]

Hi @norberto,

Thank you for your response.

@norberto

Now, if I use the Post Login trigger instead, it seems like that would trigger too late, after the signup confirmation email for first time users is already delivered. Am I right?

Yes, that is correct. However, to pile on to the solution, you could include a Force Email Verification Post-Login Action to disrupt the signup flow. This way, first-time users cannot continue access until they have verified their email address.

exports.onExecutePostLogin = async (event, api) => {
  if (!event.user.email_verified) {
    api.access.deny("Please verify your email before logging in.");
  }
};

Please let me know how this works for you.

Thank you.