Automattic / Automattic/jetpack

Subscriptions: Confirmation link in email gives error if logged into WP.com with different account

Open
#5,407 28 comments 0 reactions 0 assignees View on GitHub
[Feature] Subscriptions [Focus] FixTheFlows [Pri] Normal Bug Customer Report [LEGACY]
Dominant language
PHP
Stars
1.8k
Forks
898
Avg merge
1d 18h
Merged PRs (30d)
774

Description

Steps to reproduce the issue:
1. Log in to WordPress.com.
2. Find a JP connected blog with subscriptions active. Subscribe using a different email address than what you're logged into wp.com with.
3. Check that email address and click the confirmation link.
You will likely see something like this:

Error message (Updated by @htdat so it can be indexed and searched):

> Your subscription could not be activated. It may have expired, or the email address you subscribed with is not attached to your WordPress.com account.

![image](https://cloud.githubusercontent.com/assets/16127063/19651225/a3ca9bac-99d1-11e6-99c4-c5323f21fabc.png)

The Url of the page I'm visiting still contains the correct email address I used to subscribe:
(jetpackjacobwp@gmail.com)
![image](https://cloud.githubusercontent.com/assets/16127063/19651297/ef2cdfba-99d1-11e6-84fa-fa84256de2ec.png)

But due to wp.com seeing me logged in with the primary account, I'm unable to manage the subscriptions for that other address.
#### What I expected

To be taken to the subscription management for the email address where I received the confirmation email.
#### What happened instead

I was taken to the subscription management for the WP.com account I was logged into instead.

Other notes:
Not sure there's much to be done about this since it's opening in wp.com/calypso, and you wouldn't want one account to have the ability to manage subscription permissions over a separate account, but we may want to expand the error messaging with suggestions like "Log out of WordPress.com and click the confirmation link again" or "Try in an incognito window/separate browser"

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the confirmation flow with a WordPress.com account different from the subscription email, then inspect the WordPress.com/Calypso handling of the confirmation URL and the displayed error. Done means the user can reach the correct subscription management view, or receives clear guidance to log out or retry in a separate browser when account access prevents that.

Written by the indexing model from the issue text.

Assessment

Tech stack
wordpress
Domain
authentication, authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.