Description:

This is an issue found in Quay 3.16.0 new UI login page, when created new account and input the correct username/password to login, get error "CSRF token expired - please refresh", but actually the reason is user hasn't verify the email address.

With current UI the error message is "You must verify your email address before you can sign in", pls review this issue.

Quay:

quay.io/redhat-user-workloads/quay-eng-tenant/stable-3-16-v4-20@sha256:988adc1a375a207d0fb9bc40dc5f8f2f4aeda929675fbbc95296ea0731ac9dd2 

POST https://quay316sc-quay-quay.apps.quaytest-15505.qe.devcluster.openshift.com/api/v1/signin

The response:

{"needsEmailVerification": true, "invalidCredentials": false, "message": null}