From 449922490f2ade94a88cf6682c52e11bdb3f94ab Mon Sep 17 00:00:00 2001
From: Alice Gaudon <alice@gaudon.pro>
Date: Mon, 25 Jan 2021 14:02:58 +0100
Subject: [PATCH] MagicLinkAuthMethod: do not interrupt auth with used magic
 links

---
 src/auth/magic_link/MagicLinkAuthMethod.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/auth/magic_link/MagicLinkAuthMethod.ts b/src/auth/magic_link/MagicLinkAuthMethod.ts
index 9048594..75a0e96 100644
--- a/src/auth/magic_link/MagicLinkAuthMethod.ts
+++ b/src/auth/magic_link/MagicLinkAuthMethod.ts
@@ -49,6 +49,7 @@ export default class MagicLinkAuthMethod implements AuthMethod<MagicLink> {
     public async interruptAuth(req: Request, res: Response): Promise<boolean> {
         const pendingLink = await MagicLink.select()
             .where('session_id', req.getSession().id)
+            .where('used', 0)
             .first();
 
         if (pendingLink) {