963091 - Firefox Accounts (Sign-Up) - Unconfirmed e-mail address can't be used again

Status: RESOLVED WORKSFORME

(Firefox for Android Graveyard :: Android Sync, defect)

Description

[Ioana Chiorean]

Attachment: screenshot

Build: 2014-01-23 Nightly Firefox 29
OS: Android 4.2.2
Device: Galaxy Nexus 

Steps:
1. Settings ->  -> Add account -> Firefox Account
2. Configure a new account
3. Use a mail address you own
4. Do not confirm the link from the confirmation mail
5. Repeat steps 1-3 with same address

Expected result:
- I should be told that the mail address was used but not confirmed
- or I should be able to resend confirmation mail/ use the mail again 

Actual result:
- An error appear - from the text you can understand the account already exists even if it is not confirmed

Note:
- this is a blocker is someone else is using your e-mail you will not be able to create your own account even if you do not confirm it 
- from previous experience - some logins tell you that the confirmation links expires in x days/x hours etc. and you are able to reuse address after as it was never used.

Comment 1

[Nick Alexander :nalexander [he/him]]

This is how the service is intended.  Creating an account really creates the account, regardless of whether it's verified on some time scale.  We could change this, but that's definitely not an Fx 29 thing.  I'll post this to dev-fxacct right now.

Comment 2

[Nick Alexander :nalexander [he/him]]

Surfaced: https://mail.mozilla.org/pipermail/dev-fxacct/2014-January/000471.html

Comment 3

[Richard Newman [:rnewman]]

This, by the way, is what I was harping on about when I pointed out that giving the user a fork in the road -- create an account or log in -- is harmful.

The user does not have a mental model of server state for an email address, and we should expect some number of users to go down the wrong path as a result or by accident.

We should be providing "stiles" to allow them to hop the fence -- "I see this email address already has a Firefox Account. Enter your password to log in, or go back".

(Posting here because I'm not on that ML.)

Comment 4

[Erin Lancaster [:elan]]

This should now work.

Comment 5

[Ioana Chiorean]

Using the same address not yet confirmed  will ask you to log in because the account already exists. 
Entering you see a verification link is sent to your email. You can also reset password. 
So yeah, it is working now.