fix: Parse Server option emailVerifyTokenReuseIfValid: true generates new token on every email verification request (#8885)
This commit is contained in:
@@ -897,7 +897,7 @@ describe('Email Verification Token Expiration: ', () => {
|
||||
const config = Config.get('test');
|
||||
const [userBeforeRequest] = await config.database.find('_User', {
|
||||
username: 'resends_verification_token',
|
||||
});
|
||||
}, {}, Auth.maintenance(config));
|
||||
// store this user before we make our email request
|
||||
expect(sendVerificationEmailCallCount).toBe(1);
|
||||
await new Promise(resolve => {
|
||||
@@ -923,14 +923,14 @@ describe('Email Verification Token Expiration: ', () => {
|
||||
|
||||
const [userAfterRequest] = await config.database.find('_User', {
|
||||
username: 'resends_verification_token',
|
||||
});
|
||||
}, {}, Auth.maintenance(config));
|
||||
|
||||
// verify that our token & expiration has been changed for this new request
|
||||
// Verify that token & expiration haven't been changed for this new request
|
||||
expect(typeof userAfterRequest).toBe('object');
|
||||
expect(userBeforeRequest._email_verify_token).toBeDefined();
|
||||
expect(userBeforeRequest._email_verify_token).toEqual(userAfterRequest._email_verify_token);
|
||||
expect(userBeforeRequest._email_verify_token_expires_at).toEqual(
|
||||
userAfterRequest._email_verify_token_expires_at
|
||||
);
|
||||
expect(userBeforeRequest._email_verify_token_expires_at).toBeDefined();
|
||||
expect(userBeforeRequest._email_verify_token_expires_at).toEqual(userAfterRequest._email_verify_token_expires_at);
|
||||
done();
|
||||
});
|
||||
|
||||
|
||||
@@ -209,7 +209,7 @@ export class UserController extends AdaptableController {
|
||||
_email_verify_token &&
|
||||
new Date() < new Date(_email_verify_token_expires_at)
|
||||
) {
|
||||
return Promise.resolve();
|
||||
return Promise.resolve(true);
|
||||
}
|
||||
const shouldSend = await this.setEmailVerifyToken(user, {
|
||||
object: Parse.User.fromJSON(Object.assign({ className: '_User' }, user)),
|
||||
|
||||
@@ -476,7 +476,7 @@ export class UsersRouter extends ClassesRouter {
|
||||
);
|
||||
}
|
||||
|
||||
const results = await req.config.database.find('_User', { email: email });
|
||||
const results = await req.config.database.find('_User', { email: email }, {}, Auth.maintenance(req.config));
|
||||
if (!results.length || results.length < 1) {
|
||||
throw new Parse.Error(Parse.Error.EMAIL_NOT_FOUND, `No user found with email ${email}`);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user