Browse Source

Update ApiV1DotController, fix inAppRegistrationConfirm logic

Daniel Supernault 2 years ago
parent
commit
6cfbedd9fd
1 changed files with 5 additions and 2 deletions
  1. 5 2
      app/Http/Controllers/Api/ApiV1Dot1Controller.php

+ 5 - 2
app/Http/Controllers/Api/ApiV1Dot1Controller.php

@@ -547,13 +547,16 @@ class ApiV1Dot1Controller extends Controller
             return response()->json(['error' => 'Invalid tokens'], 403);
             return response()->json(['error' => 'Invalid tokens'], 403);
         }
         }
 
 
+        if($verify->created_at->lt(now()->subHours(24))) {
+            $verify->delete();
+            return response()->json(['error' => 'Invalid tokens'], 403);
+        }
+
         $user = User::findOrFail($verify->user_id);
         $user = User::findOrFail($verify->user_id);
         $user->email_verified_at = now();
         $user->email_verified_at = now();
         $user->last_active_at = now();
         $user->last_active_at = now();
         $user->save();
         $user->save();
 
 
-        $verify->delete();
-
         $token = $user->createToken('Pixelfed');
         $token = $user->createToken('Pixelfed');
 
 
         return response()->json([
         return response()->json([