[Bug]: Duplicate OTP emails sent when re-signing up with a previously deleted email
Author: Fermionic-LyuCreated May 7, 2026Updated Sep 15, 2026
What's the bug?
When a user is deleted from the InsForge dashboard and a new account is immediately re-registered with the same email address, the system appears to send two verification OTP emails within seconds of each other, each containing a different code.
With a truly fresh email address that has never been used before, only one OTP email is sent, which is the expected behavior.
How to reproduce
- Sign up a new user via the SDK with
[email protected] - Observe that the user is created and one OTP email is sent
- Verify the user's email, or skip verification
- Delete the user from InsForge Dashboard → Authentication → Users
- Re-register a new account via the SDK using the same email address:
[email protected] - Observe the result
Actual behavior
Two OTP verification emails are sent within seconds of each other, and each email contains a different verification code.
Expected behavior
Only one OTP verification email should be sent when re-registering the account.
Important note
This report is not confirmed yet. The issue taker should first reproduce and confirm the bug before attempting a fix.
Environment (optional)
- Signup path: SDK
- User deletion path: InsForge dashboard
- Reproduction condition: reuse an email address that belonged to a previously deleted user
Source: InsForge/InsForge