github_mirrors/puter
1
0
Fork 0
mirror of https://github.com/HeyPuter/puter.git synced 2025-01-23 22:40:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add confirmation email for email change

Browse Source
This commit is contained in:
KernelDeimos 2024-04-14 21:33:15 -04:00
parent 3b7be8a719
commit f6b737e45d
2 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
packages/backend/src/routers/change_email.js
View File

@ -23,6 +23,8 @@ const eggspress = require('../api/eggspress.js');
const APIError = require('../api/APIError.js'); const APIError = require('../api/APIError.js');
const { DB_READ, DB_WRITE } = require('../services/database/consts.js'); const { DB_READ, DB_WRITE } = require('../services/database/consts.js');
const config = require('../config.js');
const CHANGE_EMAIL_START = eggspress('/change_email/start', { const CHANGE_EMAIL_START = eggspress('/change_email/start', {
subdomain: 'api', subdomain: 'api',
auth: true, auth: true,
@ -59,18 +61,27 @@ const CHANGE_EMAIL_START = eggspress('/change_email/start', {
// generate confirmation token // generate confirmation token
const token = crypto.randomBytes(4).toString('hex'); const token = crypto.randomBytes(4).toString('hex');
// send confirmation email
const svc_email = req.services.get('email');
await svc_email.send_email({ email: new_email }, 'email_change_request', {
confirm_url: `${config.origin}/change_email/confirm?token=${token}`,
username: user.username,
});
// update user // update user
await db.write( await db.write(
'UPDATE `user` SET `unconfirmed_change_email` = ?, `change_email_confirm_token` = ? WHERE `id` = ?', 'UPDATE `user` SET `unconfirmed_change_email` = ?, `change_email_confirm_token` = ? WHERE `id` = ?',
[new_email, token, user.id] [new_email, token, user.id]
); );
res.send({ success: true });
}); });
const CHANGE_EMAIL_CONFIRM = eggspress('/change_email/confirm', { const CHANGE_EMAIL_CONFIRM = eggspress('/change_email/confirm', {
subdomain: 'api', subdomain: 'api',
auth: true, auth: true,
verified: true, verified: true,
allowedMethods: ['POST'], allowedMethods: ['GET'],
}, async (req, res, next) => { }, async (req, res, next) => {
const user = req.user; const user = req.user;
const token = req.body.token; const token = req.body.token;
@ -94,6 +105,9 @@ const CHANGE_EMAIL_CONFIRM = eggspress('/change_email/confirm', {
'UPDATE `user` SET `email` = ?, `unconfirmed_change_email` = NULL, `change_email_confirm_token` = NULL WHERE `id` = ?', 'UPDATE `user` SET `email` = ?, `unconfirmed_change_email` = NULL, `change_email_confirm_token` = NULL WHERE `id` = ?',
[new_email, user.id] [new_email, user.id]
); );
const h = `<p style="text-align:center; color:green;">Your email has been successfully confirmed.</p>`;
return res.send(h);
}); });
module.exports = app => { module.exports = app => {

13
packages/backend/src/services/EmailService.js
View File

@ -50,6 +50,19 @@ Exciting news! <a href="https://puter.com/app/{{app_name}}">{{app_title}}</a> is
<p>Best,<br /> <p>Best,<br />
The Puter Team The Puter Team
</p>
`,
},
'email_change_request': {
subject: '\u{1f4dd} Confirm your email change',
html: `
<p>Hi there,</p>
<p>
We received a request to link this email to the user "{{username}}" on Puter. If you made this request, please click the link below to confirm the change. If you did not make this request, please ignore this email.
</p>
<p>
<a href="{{confirm_url}}">Confirm email change</a>
</p> </p>
`, `,
}, },