search

HydreIO / auth

A light graphql authentication server built on RedisGraph (Kubernetes ready)
The Unlicense
3 stars 2 forks source link

Change confirm account code #11

Closed FrostiizGit closed 3 years ago

FrostiizGit commented 3 years ago

Currently, the confirm code is a field in the user this means: Each time we generate a new code, it will replace the previous one. And we have no way to check if the code is valid. Thus causing errors in the front when trying to confirm the account with an 'old' code. The best way would be to generate a stateless token using JWT that will allow the app to check the code.

Sceat commented 3 years ago

This is missing inside the create_user resolver