My application sends mails containing an authentication token. The user which receives the mail clicks on a link and is directed to a webpage. The app recognizes him.
The problem is that sometimes the mail is sent to a mailing list instead of a personal address. Then several people come on the page and override each others' actions.
There are 2 ways I think I could solve this :
- detect that the email address is a mailing list before I send the mail
- include the final recipient address in the link in the email.
Is any of the 2 possible ?