Question

By default, devise uses an email address for sign up and sign in.

But I want that the email address should be allowed to be changed by the user.

If I allow the user to edit the email address, and the user specifies an “incorrect” (i.e. a typo by mistake) email address and then user signs out, and the user also forgets what the typo’ed email was, now the user account is inaccessible by the user!

How to best work around this? (except for creating a separate, unchangeable username field that will always allow user to login)

Answer 1

You can force the user to confirm his account again if he changes his email.

Once, you updated the password of the concerned user, you need to un-confirm the user, and then re-send the confirmation email.

To unconfirm the user :

user = User.find(1)
if user.confirmed?
  user.confirmed_at = nil
  user.save(:validate => false)
end

To resend the email confirmation :

user = User.find(1)
user.send_confirmation_instructions

Hope this help !