CIA-Homebrew / BJCP-Scoresheet

Digital form of BJCP scoresheet for beer judging.
GNU General Public License v3.0
8 stars 5 forks source link

Remove authguard from email verification / password reset endpoints #139

Closed prphntm63 closed 3 years ago

prphntm63 commented 3 years ago

If a user clicks their email verification link on a different device than the one they registered with (or uses a different browser), the application flow does not register the validation, as it expects a token to populate user information.

Solution is to simply remove the req.user.id dependency from these routes in the validateEmail routehandler function.