MagicLinkAuthMethod: do not interrupt auth with used magic links
This commit is contained in:
parent
a314c9a55a
commit
449922490f
@ -49,6 +49,7 @@ export default class MagicLinkAuthMethod implements AuthMethod<MagicLink> {
|
|||||||
public async interruptAuth(req: Request, res: Response): Promise<boolean> {
|
public async interruptAuth(req: Request, res: Response): Promise<boolean> {
|
||||||
const pendingLink = await MagicLink.select()
|
const pendingLink = await MagicLink.select()
|
||||||
.where('session_id', req.getSession().id)
|
.where('session_id', req.getSession().id)
|
||||||
|
.where('used', 0)
|
||||||
.first();
|
.first();
|
||||||
|
|
||||||
if (pendingLink) {
|
if (pendingLink) {
|
||||||
|
Loading…
Reference in New Issue
Block a user