Verify Email Feature Creates non-HTTPS Link

Hello Bubble Community!

I’m attempting to use bubble’s built-in ‘verify email flow’ and the link sent to the registering user’s email does not include https, only http; this of course creates the warning in the screenshot below.

How do I get this link to include https?

Below is a screenshot of the workflow step that is sending the email.

Do you have TLS encryption enabled in settings?

@tarasmuzon , sorry for my delay in getting back into the forum… Yes, that value is set and the rest of the application is working nicely through https.

This really seems to be an issue with bubble’s built-in verification email having “http” hard coded into the email body.

Here is the first part of the URL, as it was received in my Inbox used for testing. “http://url620.mydomain.com” where the http is used (not https) and url620 is a subdomain generated by Bubble.

@nilsobrien Did you manage to find a solution to this?

I did not.

This is annoying! I guess a solution would be to find and replace the http with https in the verification email.

I imagine removing the http:// altogether could also avoid the issue, as well as removing https:// so you don’t accidentally end up with httpss:// or just s://

Scratch that. The link still doesn’t support https either way :enraged_face:

1 Like

Its certainly frustrating; just about every browser raises all types of red-flags and “are you sure you want to visit this dangerous website” when https isn’t used.

I’ll take a look at our implementation again and see if i can think of any new ideas. We’re still pre-prod, so we haven’t had to deal with support concerns from users and I put this to the back burner for a bit.

1 Like

As an FYI, I’ve created a support item with Bubble on this one and got word that they’re looking into the issue.

I’ve just done some more digging on this one and found a solution - if you’re sending via SendGrid (and maybe PostMark), and have Click Tracking enabled, you’ll get a URL that’s not HTTPS.

Remove Click Tracking and voila, you have an HTTPS verification link.