While testing CB Verify with Stripe Identity I noticed that can CB Verify verify an unauthenticated user too.
It inserts a record in the *_cbidverify_verified table, using a user id value of 0 (zero).
Does this mean that an unauthenticated user could use URL and access the content intended for authenticated + verified users only?
We want to prevent this from happening? Please suggest ways to implement this, as the site provides services only to authenticated and verified users.
