mirror/fosrl.pangolin
1
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2025-07-16 08:54:58 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

check for stale users on signup

Browse source
This commit is contained in:
Milo Schwartz 2024-10-07 23:31:23 -04:00
parent 3a52615e3e
commit 6fb569e2cd
No known key found for this signature in database
4 changed files with 55 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

39
server/routers/auth/signup.ts
View file

@ -12,6 +12,8 @@ import response from "@server/utils/response";
import { SqliteError } from "better-sqlite3";
import { sendEmailVerificationCode } from "./sendEmailVerificationCode";
import { passwordSchema } from "@server/auth/passwordSchema";
import { eq } from "drizzle-orm";
import moment from "moment";
export const signupBodySchema = z.object({
email: z.string().email(),
@ -51,10 +53,47 @@ export async function signup(
const userId = generateId(15);
try {
const existing = await db
.select()
.from(users)
.where(eq(users.email, email));
if (existing && existing.length > 0) {
const user = existing[0];
// If the user is already verified, we don't want to create a new user
if (user.emailVerified) {
return next(
createHttpError(
HttpCode.BAD_REQUEST,
"A user with that email address already exists",
),
);
}
const dateCreated = moment(user.dateCreated);
const now = moment();
const diff = now.diff(dateCreated, "hours");
if (diff < 2) {
// If the user was created less than 2 hours ago, we don't want to create a new user
return next(
createHttpError(
HttpCode.BAD_REQUEST,
"A verification email was already sent to this email address. Please check your email for the verification code.",
),
);
} else {
// If the user was created more than 2 hours ago, we want to delete the old user and create a new one
await db.delete(users).where(eq(users.id, user.id));
}
}
await db.insert(users).values({
id: userId,
email: email,
passwordHash,
dateCreated: moment().toISOString(),
});
const session = await lucia.createSession(userId, {});