summary refs log tree commit diff
path: root/src/api/routes/auth/login.ts
diff options
context:
space:
mode:
authorPuyodead1 <puyodead@proton.me>2023-01-30 19:05:22 -0500
committerPuyodead1 <puyodead@protonmail.com>2023-02-23 22:40:05 -0500
commit34cde14f753feb37a2b1dd2ce772ccc8552b4198 (patch)
treed863d17934a31c8bffb6425961e049b387b6b2f1 /src/api/routes/auth/login.ts
parentfix linting errors (diff)
downloadserver-34cde14f753feb37a2b1dd2ce772ccc8552b4198.tar.xz
config: require account verification
Diffstat (limited to '')
-rw-r--r--src/api/routes/auth/login.ts11
1 files changed, 11 insertions, 0 deletions
diff --git a/src/api/routes/auth/login.ts b/src/api/routes/auth/login.ts
index 2b97ec10..89d0be69 100644
--- a/src/api/routes/auth/login.ts
+++ b/src/api/routes/auth/login.ts
@@ -102,6 +102,17 @@ router.post(
 			});
 		}
 
+		// return an error for unverified accounts if verification is required
+		if (config.login.requireVerification && !user.verified) {
+			throw FieldErrors({
+				login: {
+					code: "ACCOUNT_LOGIN_VERIFICATION_EMAIL",
+					message:
+						"Email verification is required, please check your email.",
+				},
+			});
+		}
+
 		if (user.mfa_enabled && !user.webauthn_enabled) {
 			// TODO: This is not a discord.com ticket. I'm not sure what it is but I'm lazy
 			const ticket = crypto.randomBytes(40).toString("hex");