View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0005285||OXID eShop (all versions)||1.05. Users||public||2013-07-11 14:42||2015-03-12 16:40|
|Target Version||4.9.0_5.2.0_RC1||Fixed in Version|
|Summary||0005285: Shop should check if user owns email when user creates shop account|
|Description||If you have a shop-side user account and use Paypal Express without being logged in (Email-Address in Shop matches Email-Address in Paypal) and select a different delivery address, you are greeted with Error-Message after being redirected back to shop. Message asks user to login and go through checkout again, it is related with possible security issues, as emails are note validated (confirmation mail should be sent). |
If email would be always validated, shop could trust shipping address from PayPal.
|Tags||No tags attached.|
||waiting for the PO decision.|
Why do you have to go through pp-Express checkout again? With pp-Express, user is sent to order overwiew from pp, why not ask for password when user is sent back to shop and then directly show order overview?
Other possible solution: make guest orders with existing mail addresses possible.
moved to backlog