This is the link: It is possible to login unconfirmed authenticated users. · Issue #10308 · strapi/strapi · GitHub