-
-
Notifications
You must be signed in to change notification settings - Fork 4.3k
security: require verified email to accept invite when logged in #66849
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #66849 +/- ##
===========================================
+ Coverage 48.69% 84.32% +35.63%
===========================================
Files 6455 5306 -1149
Lines 287155 237136 -50019
Branches 49482 41016 -8466
===========================================
+ Hits 139823 199966 +60143
+ Misses 146786 36952 -109834
+ Partials 546 218 -328
|
e525517
to
966b563
Compare
2360e14
to
e4d3d68
Compare
This pull request has gone three weeks without activity. In another week, I will close it. But! If you comment or otherwise update it, I will reset the clock, and if you add the label "A weed is but an unloved flower." ― Ella Wheeler Wilcox 🥀 |
e4d3d68
to
1f809c3
Compare
b0494ad
to
1f809c3
Compare
See #64707
Users do not expect to be able to accept an invite with an email that does not align to the original invite's target email when they are already logged in. This PR changes the current behavior to only accept the invite if the logged in account has the email as an existing verified email.