mirror of
https://github.com/overleaf/overleaf.git
synced 2024-11-07 20:31:06 -05:00
0e38ca1fd7
Check User Exists Before Confirming Email GitOrigin-RevId: 3622044f31f78e8499ccd084ca99297ca297ca97
42 lines
1.8 KiB
CoffeeScript
42 lines
1.8 KiB
CoffeeScript
EmailHelper = require "../Helpers/EmailHelper"
|
|
EmailHandler = require "../Email/EmailHandler"
|
|
OneTimeTokenHandler = require "../Security/OneTimeTokenHandler"
|
|
settings = require 'settings-sharelatex'
|
|
Errors = require "../Errors/Errors"
|
|
logger = require "logger-sharelatex"
|
|
UserUpdater = require "./UserUpdater"
|
|
UserGetter = require "./UserGetter"
|
|
|
|
ONE_YEAR_IN_S = 365 * 24 * 60 * 60
|
|
|
|
module.exports = UserEmailsConfirmationHandler =
|
|
sendConfirmationEmail: (user_id, email, emailTemplate, callback = (error) ->) ->
|
|
if arguments.length == 3
|
|
callback = emailTemplate
|
|
emailTemplate = 'confirmEmail'
|
|
email = EmailHelper.parseEmail(email)
|
|
return callback(new Error('invalid email')) if !email?
|
|
data = {user_id, email}
|
|
OneTimeTokenHandler.getNewToken 'email_confirmation', data, {expiresIn: ONE_YEAR_IN_S}, (err, token)->
|
|
return callback(err) if err?
|
|
emailOptions =
|
|
to: email
|
|
confirmEmailUrl: "#{settings.siteUrl}/user/emails/confirm?token=#{token}"
|
|
sendingUser_id: user_id
|
|
EmailHandler.sendEmail emailTemplate, emailOptions, callback
|
|
|
|
confirmEmailFromToken: (token, callback = (error) ->) ->
|
|
logger.log {token_start: token.slice(0,8)}, 'confirming email from token'
|
|
OneTimeTokenHandler.getValueFromTokenAndExpire 'email_confirmation', token, (error, data) ->
|
|
return callback(error) if error?
|
|
if !data?
|
|
return callback(new Errors.NotFoundError('no token found'))
|
|
{user_id, email} = data
|
|
logger.log {data, user_id, email, token_start: token.slice(0,8)}, 'found data for email confirmation'
|
|
if !user_id? or email != EmailHelper.parseEmail(email)
|
|
return callback(new Errors.NotFoundError('invalid data'))
|
|
UserGetter.getUser user_id, {}, (error, user) ->
|
|
return callback(error) if error?
|
|
unless user?._id
|
|
return callback(new Errors.NotFoundError('user not found'))
|
|
UserUpdater.confirmEmail user_id, email, callback
|