andwati/dokploy
1
0
Fork 0
mirror of https://github.com/andwati/dokploy.git synced 2026-11-01 17:52:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: address PR review — case-insensitive email check and proper error handling

Browse Source 
- Normalize emails with toLowerCase().trim() before comparing
- Wrap getUserByToken in try/catch since it throws TRPCError on miss,
  rethrow as APIError for consistent error responses
This commit is contained in:
Mauricio Siu
2026-04-05 12:42:09 -06:00
parent 04ffa43008
commit ddde6a7bcb
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/server/src/lib/auth.ts
+6 -4
View File
@@ -148,10 +148,12 @@ const { handler, api } = betterAuth({
const xDokployToken = const xDokployToken =
context?.request?.headers?.get("x-dokploy-token"); context?.request?.headers?.get("x-dokploy-token");
if (xDokployToken) { if (xDokployToken) {
const invitation = await getUserByToken(xDokployToken); let invitation: Awaited<ReturnType<typeof getUserByToken>>;
if (!invitation) { try {
invitation = await getUserByToken(xDokployToken);
} catch {
throw new APIError("BAD_REQUEST", { throw new APIError("BAD_REQUEST", {
message: "User not found", message: "Invalid invitation token",
}); });
} }
if (invitation.isExpired) { if (invitation.isExpired) {
@@ -164,7 +166,7 @@ const { handler, api } = betterAuth({
message: "Invitation has already been used", message: "Invitation has already been used",
}); });
} }
if (_user.email !== invitation.email) { if (_user.email.toLowerCase().trim() !== invitation.email.toLowerCase().trim()) {
throw new APIError("BAD_REQUEST", { throw new APIError("BAD_REQUEST", {
message: "Email does not match invitation", message: "Email does not match invitation",
}); });