Allauth: disable account enumeration protection (#11797)

Closes readthedocs/readthedocs-ops#1569
readthedocs · Nov 26, 2024 · 33a9de0 · 33a9de0
1 parent ebe3b2c
commit 33a9de0
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/readthedocs/settings/base.py b/readthedocs/settings/base.py
@@ -662,6 +662,11 @@ def DOCKER_LIMITS(self):
     # Allauth
     ACCOUNT_ADAPTER = "readthedocs.core.adapters.AccountAdapter"
     ACCOUNT_EMAIL_REQUIRED = True
+    # By preventing enumeration, we will always send an email,
+    # even if the email is not registered, that's hurting
+    # our email reputation. We are okay with people knowing
+    # if an email is registered or not.
+    ACCOUNT_PREVENT_ENUMERATION = False
 
     # Make email verification mandatory.
     # Users won't be able to login until they verify the email address.