Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Add POST /api/v1/emails/confirmations to REST API (#15816)

Browse source 
Only available to the application the user originally signed-up with
This commit is contained in:
Eugen Rochko 2021-03-01 18:39:47 +01:00 • committed by GitHub
parent 287aa75f2e
commit ee1119208c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 27 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

17
app/controllers/api/v1/emails/confirmations_controller.rb Normal file
View file

@ -0,0 +1,17 @@
# frozen_string_literal: true
class Api::V1::Emails::ConfirmationsController < Api::BaseController
before_action :doorkeeper_authorize!
before_action :require_user_owned_by_application!
def create
current_user.resend_confirmation_instructions if current_user.unconfirmed_email.present?
render_empty
end
private
def require_user_owned_by_application!
render json: { error: 'This method is only available to the application the user originally signed-up with' }, status: :forbidden unless current_user && current_user.created_by_application_id == doorkeeper_token.application_id
end
end