diff --git a/services/web/app/src/Features/Collaborators/CollaboratorsInviteHandler.js b/services/web/app/src/Features/Collaborators/CollaboratorsInviteHandler.js index 85ad9d9d52..8f92742cc0 100644 --- a/services/web/app/src/Features/Collaborators/CollaboratorsInviteHandler.js +++ b/services/web/app/src/Features/Collaborators/CollaboratorsInviteHandler.js @@ -149,7 +149,7 @@ const CollaboratorsInviteHandler = { logger.debug({ projectId }, 'fetching invite by token') const invite = await ProjectInvite.findOne({ projectId, - token: tokenString, + tokenHmac: CollaboratorsInviteHelper.hashInviteToken(tokenString), }).exec() if (invite == null) { diff --git a/services/web/test/unit/src/Collaborators/CollaboratorsInviteHandlerTests.js b/services/web/test/unit/src/Collaborators/CollaboratorsInviteHandlerTests.js index f16e726e1f..9823808c26 100644 --- a/services/web/test/unit/src/Collaborators/CollaboratorsInviteHandlerTests.js +++ b/services/web/test/unit/src/Collaborators/CollaboratorsInviteHandlerTests.js @@ -41,8 +41,9 @@ describe('CollaboratorsInviteHandler', function () { this.UserGetter = { promises: { getUser: sinon.stub() } } this.ProjectGetter = { promises: {} } this.NotificationsBuilder = { promises: {} } + this.tokenHmac = 'jkhajkefhaekjfhkfg' this.CollaboratorsInviteHelper = { - hashInviteToken: sinon.stub().returns('abcd'), + hashInviteToken: sinon.stub().returns(this.tokenHmac), } this.CollaboratorsInviteHandler = SandboxedModule.require(MODULE_PATH, { @@ -73,7 +74,6 @@ describe('CollaboratorsInviteHandler', function () { } this.inviteId = new ObjectId() this.token = 'hnhteaosuhtaeosuahs' - this.tokenHmac = 'jkhajkefhaekjfhkfg' this.privileges = 'readAndWrite' this.fakeInvite = { _id: this.inviteId, @@ -458,7 +458,7 @@ describe('CollaboratorsInviteHandler', function () { await this.call() this.ProjectInvite.findOne.callCount.should.equal(1) this.ProjectInvite.findOne - .calledWith({ projectId: this.projectId, token: this.token }) + .calledWith({ projectId: this.projectId, tokenHmac: this.tokenHmac }) .should.equal(true) }) })