Email Address Automatic Verification happening at random times.

Hi all. Just posting this here in case somebody else is facing the same issue.

We create a user using the v1 create user API and then send out an invite code for the user to verify their email address and set their initial password. What is happening is that the user's email is getting verified automatically without them clicking the invite email.

In the attached picture you can see that the events happen right after the other in a very short amount of time without interaction from the user.

is anyone else experiencing this same behavior?

Ask Inkeep•12/1/25, 3:01 PM

Hi @fernandolopezchs11, I'm an AI assistant for ZITADEL. While a team member reviews this question, I'll see if I can find relevant sources for your question.

Ask Inkeep•12/1/25, 3:01 PM

Answer

I wasn't able to find a direct answer about automatic email verification when using the v1 create user API with invite codes. Here are some relevant sources:

[Bug]: Email verification code not working if user tries to login directly (1) : This GitHub issue describes unexpected behavior with verification and invite codes, where different flows (verify-email vs invite/initialization) can occur depending on how the user interacts with the system .
Custom registration flow questions-help-bugsCustom registration flow : This discussion covers the invite code workflow and mentions that the invite code verifies the user when called through the verify invite code endpoint .

For further assistance, you might want to:

Visit Contact
Visit GitHub

Would you like me to provide a general answer based on my knowledge instead?

Ask Inkeep•12/1/25, 3:01 PM

To learn more, see the sources I considered:

[1] [Bug]: Email verification code not working if user tries to login directly
questions-help-bugsCustom registration flow

Ask Inkeep•12/1/25, 3:01 PM

Feel free to tag @Ask Inkeep with additional questions.

Rajat•12/2/25, 9:49 AM

hey @fernandolopezchs11 what version are you on and are you self hosted?. Which v1 create user api did you use?. Thanks

fernandolopezchs11OP•12/5/25, 7:40 PM

@Rajat This is not a bug in zitadel. What I found out is that the hosted typescript UI is auto submitting. When the invite code gets sent to the user some corporate email domains look at the invite link and send a headless browser request to check what the url is. This executes the javascript and auto submits the form. Just typing this here in case someone experiences the same behavior.

Gigi the Giraffe (Zitadel)•12/7/25, 8:30 AM

Looks like you just helped out another community member! Thanks for being so helpful @811819358941609984! You're now one step closer to leveling up—keep up the amazing peer support!