cool! enforcing user must be confirmed to accept invites. we should d…

…o this on the client too, obvis. that was the last todo in the server. bugs aside, it should be complete now. oh what a day! WHAT A LOVELY DAY!
turtl · Apr 1, 2017 · 5ad9d58 · 5ad9d58
1 parent 83107a6
commit 5ad9d58
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 2 deletions.
diff --git a/TODO b/TODO
@@ -1,2 +0,0 @@
-- disable sharing unless confirmed
-

diff --git a/models/invite.js b/models/invite.js
@@ -168,6 +168,7 @@ exports.accept = function(user_id, space_id, invite_id) {
 			return user_model.get_by_id(user_id)
 				.then(function(user) {
 					if(user.username != invite.to_user) throw error.forbidden('that invite wasn\'t sent to your email ('+user.username+')');
+					if(!user.confirmed) throw error.forbidden('you must confirm your account to accept an invite');
 					return space_model.user_is_in_space(user_id, space_id);
 				})
 				.then(function(spaceuser) {