#1215·InsForge

[Bug]: Duplicate OTP emails sent when re-signing up with a previously deleted email

Author: Fermionic-LyuCreated May 7, 2026Updated Sep 15, 2026

What's the bug?

When a user is deleted from the InsForge dashboard and a new account is immediately re-registered with the same email address, the system appears to send two verification OTP emails within seconds of each other, each containing a different code.

With a truly fresh email address that has never been used before, only one OTP email is sent, which is the expected behavior.

How to reproduce

  1. Sign up a new user via the SDK with [email protected]
  2. Observe that the user is created and one OTP email is sent
  3. Verify the user's email, or skip verification
  4. Delete the user from InsForge Dashboard → Authentication → Users
  5. Re-register a new account via the SDK using the same email address: [email protected]
  6. Observe the result

Actual behavior

Two OTP verification emails are sent within seconds of each other, and each email contains a different verification code.

Expected behavior

Only one OTP verification email should be sent when re-registering the account.

Important note

This report is not confirmed yet. The issue taker should first reproduce and confirm the bug before attempting a fix.

Environment (optional)

  • Signup path: SDK
  • User deletion path: InsForge dashboard
  • Reproduction condition: reuse an email address that belonged to a previously deleted user