andwati/dokploy
1
0
Fork 0
mirror of https://github.com/andwati/dokploy.git synced 2026-10-21 12:34:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: validate invitation expiry and status on signup

Browse Source 
Also checks that the invitation is not expired and has not already been
used before allowing account creation.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
This commit is contained in:
Mauricio Siu
2026-04-05 12:39:43 -06:00
co-authored by Claude Opus 4.6
parent 17393af717
commit 04ffa43008
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/server/src/lib/auth.ts
+10
View File
@@ -154,6 +154,16 @@ const { handler, api } = betterAuth({
message: "User not found",
});
}
if (invitation.isExpired) {
throw new APIError("BAD_REQUEST", {
message: "Invitation has expired",
});
}
if (invitation.status !== "pending") {
throw new APIError("BAD_REQUEST", {
message: "Invitation has already been used",
});
}
if (_user.email !== invitation.email) {
throw new APIError("BAD_REQUEST", {
message: "Email does not match invitation",