CodeCow/stack
1
0
Fork 0
mirror of https://github.com/stack-auth/stack.git synced 2026-06-04 21:04:37 +08:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Don't allow creating new auth contact channels with emails that already exist

Browse Source
This commit is contained in:
Konstantin Wohlwend 2024-11-23 03:30:04 +01:00
parent daa2aa1da0
commit 86d3eaf7f8
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
apps/backend/src/app/api/v1/contact-channels/crud.tsx
View File

@ -70,6 +70,23 @@ export const contactChannelsCrudHandlers = createLazyProxy(() => createCrudHandl
value: data.value,
});
// if usedForAuth is set to true, make sure no other account uses this channel for auth
if (data.used_for_auth) {
const existingWithSameChannel = await tx.contactChannel.findUnique({
where: {
projectId_type_value_usedForAuth: {
projectId: auth.project.id,
type: crudContactChannelTypeToPrisma(data.type),
value: data.value,
usedForAuth: 'TRUE',
},
},
});
if (existingWithSameChannel) {
throw new KnownErrors.ContactChannelAlreadyUsedForAuthBySomeoneElse(data.type);
}
}
const createdContactChannel = await tx.contactChannel.create({
data: {
projectId: auth.project.id,