On 3/15/22 03:04, IEM Network Operation Center (IOhannes m zmölnig) wrote:
afaiu, this snippet allows me to purge outdated pending subscriptions.
modifying it slightly, also allows me to just list the pending subscriptions along with their tokens and print them out.
That is correct.
is it still possible to just use these tokens to confirm the pending subscription (even though it is long overdue)?
Yes.
while investigating this a bit, i also noticed that it seems that with mailman3 the only option to confirm a pending subscription is via email ("leaving the subject intact") - at least that is the only option that is listed in the confirmation mail.
now i would like to massage this into what i think is a bit more user-friendly. first of all: most email confirmation systems allow me to either "reply by email" or "click this link". is there a way to do this for mailman3? that is: is there a (hidden) URL that would accept the token in order to confirm a subscription?
See https://gitlab.com/mailman/mailman/-/issues/901
You can add something like
Alternatively, you can confirm by going to the URL
https://$domain/mailman3/lists/$list_id/confirm/?token=$token
to the list:user:action:subscribe template. Note that $domain may not
be appropriate here because it is the email domain which may not be the
web domain.
also: the confirmation mail says that the subject must be kept intact. however, i noticed that the actual "From" address of the confirmation mail already contains the token.
The current template https://gitlab.com/mailman/mailman/-/blob/master/src/mailman/templates/en/li... doesn't say that.
would it be enough if people just sent an email to this special email-address (that contains the token), regardless of the subject?
Yes.
i'm thinking of sending a rather personalized email that has a more attractive subject than "confirm flkdsajfsalkjflsajfsoisjdl".
The current mail has Subject: Your confirmation is needed to join the <fqdn_listname> mailing list
finally: what else is required to approve the confirmation? will the sender's email-address be taken into account? (e.g. if they subscribed "foo+mylist@example.com" but send the confirmation-reply from "foo@example.com", will that still work?
Yes. Only the token is required.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan