Delete mail login token rows after usage

This commit is contained in:
Jonas Lochmann 2021-12-27 01:00:00 +01:00
parent 3a59743de9
commit 0663650d9b
No known key found for this signature in database
GPG key ID: 8B8C9AEE10FA5B36

View file

@ -132,6 +132,17 @@ export const signInByMailCode = async ({ mailLoginToken, receivedCode, database
}
}
const counter = await database.mailLoginToken.destroy({
where: {
mailLoginToken
},
transaction
})
if (counter !== 1) {
throw new Gone()
}
const mailAuthToken = await createAuthTokenByMailAddress({ mail: entry.mail, database, transaction })
return { mailAuthToken }