The-pack-family/APIv3
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix issue where multiple users could confirm with the same email

Browse Source
This commit is contained in:
Colin McDonald 2016-07-23 14:29:26 -04:00
parent 95440504d5
commit 60dfe6b03e
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/java/net/frozenorb/apiv3/route/emailTokens/POSTEmailTokensIdConfirm.java
View File

@ -33,6 +33,13 @@ public final class POSTEmailTokensIdConfirm implements Handler<RoutingContext> {
return;
}
User sameEmail = SyncUtils.runBlocking(v -> User.findByConfirmedEmail(user.getPendingEmail(), v));
if (sameEmail != null) {
ErrorUtils.respondInvalidInput(ctx, user.getPendingEmail() + " is already in use.");
return;
}
JsonObject requestBody = ctx.getBodyAsJson();
String password = requestBody.getString("password");