Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-03-06 12:31:33 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: make sure inviter user exists

Browse Source
This commit is contained in:
gasoved
2021-01-12 00:02:40 +03:00
committed by Julian Lam
parent a407a51da6
commit 69419571a9
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/user/invite.js
View File

@@ -38,6 +38,10 @@ module.exports = function (User) {
}; };
User.sendInvitationEmail = async function (uid, email, groupsToJoin) { User.sendInvitationEmail = async function (uid, email, groupsToJoin) {
if (!uid) {
throw new Error('[[error:invalid-uid]]');
}
const email_exists = await User.getUidByEmail(email); const email_exists = await User.getUidByEmail(email);
if (email_exists) { if (email_exists) {
throw new Error('[[error:email-taken]]'); throw new Error('[[error:email-taken]]');
@@ -104,6 +108,11 @@ module.exports = function (User) {
} }
async function prepareInvitation(uid, email, groupsToJoin) { async function prepareInvitation(uid, email, groupsToJoin) {
const inviterExists = await User.exists(uid);
if (!inviterExists) {
throw new Error('[[error:invalid-uid]]');
}
const token = utils.generateUUID(); const token = utils.generateUUID();
const registerLink = nconf.get('url') + '/register?token=' + token + '&email=' + encodeURIComponent(email); const registerLink = nconf.get('url') + '/register?token=' + token + '&email=' + encodeURIComponent(email);