Agency Admin Verification Issues

[luukee]

Issue 01

SCENARIO: User does not have an account, add them as an agency user.

1. The user is sent an email (subject: Sign in to MisInfo App requested at [date]) and when the user clicks the link in the email this window appears:

Window after clicking link in (Sign in to MisInfo App requested at [date]_) email

2. after filling out the form with the original email the user is automatically logged in.

• The new user has these attributes:

  • An account in Firebase Authentication
  • Agency Admin privileges for the agency
  • A verification email (subject: Verify your email for MisInfo App) in their inbox.

• The new user does NOT have these attributes:

  • A mobileUsers document in the database (because they have not clicked the verification email in their inbox).

Fix

• On submission of the form in "Window after clicking link in (Sign in to MisInfo App requested at [date]_) email" they should be shown a "Check your email for the final verification" message.
• Clicking the link in the final verification email should add them as a document in the mobileUsers collection.

Reasoning:

If the user is automatically logged in they will not go through the final step of verifying their email/account creation on a general user signup (sign up -> click link in confirmation email). This poses an issue because when they come back to their email and see the second verification email it might be expired or they might disregard it all together.

At this time of writing if the user clicks the link in the verification email a mobileUsers document is not created for them.

Since there is no mobileUsers doc for the new user if they create a report it is not attached to any agency or user.

Issue 02

SCENARIO:

• User has auth account
• User has mobileUsers doc
• User has been added to an agency
• Resend link button clicked for their email

1. Click the "Resend link" button on user's email.
2. User gets an email (subject: Sign in to MisInfo App requested at [date]) & clicks link
3. Taken to:

Window after clicking link in (Sign in to MisInfo App requested at [date]_) email

This may not be the best action after clicking the link.

(continued after breakfast...)

[luukee]

@julia-elias Since this is not going public should we even have a signup page?

We should instead allow agency admin users to add users to the agency.
On adding the user they agency admin should have the option to add the user as a general user or an agency admin for their agency.