Skip to content

Release: develop -> main#4286

Merged
TaprootFreak merged 1 commit into
mainfrom
develop
Jul 20, 2026
Merged

Release: develop -> main#4286
TaprootFreak merged 1 commit into
mainfrom
develop

Conversation

@github-actions

Copy link
Copy Markdown

Automatic Release PR

This PR was automatically created after changes were pushed to develop.

Commits: 1 new commit(s)

Checklist

  • Review all changes
  • Verify CI passes
  • Approve and merge when ready for production

…email that never arrives (#4283)

* fix(realunit): confirm existing-shareholder registrations without an email that never arrives

Aktionariat's registerUser answers "Existing user found, updated your address." when the
signed email already belongs to a share-register shareholder: it updates that shareholder's
wallet in place and sends NO confirmation email (a newly registered email instead gets
"Confirmation email sent to ..."). Since #4215 gates buy quotes on a confirmed registration
email, those registrations were persisted COMPLETED with requiresEmailConfirmation=true and
hang forever on a confirmation link that is never sent.

Persist an existing-shareholder registration with requiresEmailConfirmation=false (Aktionariat's
match IS the confirmation), and backfill the rows already stuck before the fix, keyed on the
durable Aktionariat/Registration log evidence.

* fix(realunit): anchor existing-shareholder marker to the message start

The isExistingShareholderResponse guard matched "existing user found" as a
free substring of Aktionariat's registerUser reply. Because the alternative
"Confirmation email sent to <email>" reply echoes the raw registrant email, an
address embedding those words (e.g. a quoted local part) could spoof the marker
and un-gate a registration whose confirmation email was in fact sent and never
confirmed. Match it as a start-anchored prefix instead (the real reply is
exactly "Existing user found, updated your address.") and add a regression test
pinning the substring-spoof case as still gated.

---------

Co-authored-by: TaprootFreak <142087526+TaprootFreak@users.noreply.github.com>
@TaprootFreak
TaprootFreak merged commit b470872 into main Jul 20, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants