Information processing apparatus, information processing method, and storage medium

An information processing method comprising:

• receiving a registration request for a user;
• transmitting an e-mail including an authentication uniform resource locator (URL) to an e-mail address included in the registration request;
• receiving an authentication request for the e-mail address, the authentication request being transmitted by access to the authentication URL;
• determining whether the received registration request is under attack;
• in a case where the received registration request is determined to be under attack, performing control to request a transmitter of the received authentication request to perform a confirmation operation to confirm whether the transmitter has made the registration request and, in a case where the received registration request is determined to be not under attack, performing control not to request the confirmation operation;
• and
• authenticating the e-mail address corresponding to the received authentication request and registering the user corresponding to the registration request including the e-mail address,
• wherein, in a case where the confirmation operation is requested, the user is not registered based on a result of the confirmation operation.

A non-transitory computer-readable storage medium storing a program for causing an information processing apparatus to execute an information processing method comprising:

• receiving a registration request for a user;
• transmitting an e-mail including an authentication uniform resource locator (URL) to an e-mail address included in the registration request;
• receiving an authentication request for the e-mail address, the authentication request being transmitted by access to the authentication URL;
• determining whether the received registration request is under attack;
• in a case where the received registration request is determined to be under attack, performing control to request a transmitter of the received authentication request to perform a confirmation operation to confirm whether the transmitter has made the registration request and, in a case where the received registration request is determined to be not under attack, performing control not to request the confirmation operation;
• and
• authenticating the e-mail address corresponding to the received authentication request and registering the user corresponding to the registration request including the e-mail address,
• wherein, in a case where the confirmation operation is requested, the user is not registered based on a result of the confirmation operation.