made invites one time use only

dresden-zone · Mar 23, 2024 · ef6fbfa · ef6fbfa
1 parent 12bf3c2
commit ef6fbfa
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/ruth/src/service/user.rs b/ruth/src/service/user.rs
@@ -47,6 +47,7 @@ impl UserService {
     password: &[u8],
   ) -> anyhow::Result<user::Model> {
     let invite = Invite::find_by_id(invite_id)
+      .filter(invite::Column::Expire.gte(OffsetDateTime::now_utc()))
       .one(&self.db)
       .await?
       // TODO: handle error 410 gone?
@@ -82,6 +83,11 @@ impl UserService {
 
     password.insert(&self.db).await?;
 
+    let result = Invite::delete_by_id(invite_id).exec(&self.db).await?;
+
+    // TODO: do we want asserts?
+    assert_eq!(result.rows_affected, 1);
+
     // TODO: send email verify email
 
     Ok(user)