From c45b076df9f6042ceeb1a3910cf227654fb79a55 Mon Sep 17 00:00:00 2001 From: David Baker Date: Tue, 11 Oct 2016 18:13:26 +0100 Subject: [PATCH] More commentary --- src/Signup.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/Signup.js b/src/Signup.js index 13cb9b47fd..e387513c90 100644 --- a/src/Signup.js +++ b/src/Signup.js @@ -135,6 +135,10 @@ class Register extends Signup { // generate one for this session. It will only be used if // we do email verification, but far simpler to just make // sure we have one. + // We re-use this same secret over multiple calls to register + // so that the identity server can honour the sendAttempt + // parameter and not re-send email unless we actually want + // another mail to be sent. if (!this.params.clientSecret) { this.params.clientSecret = client.generateClientSecret(); }