From c93bd0105e9e0d3a5350f8e730c2792ee9515ca0 Mon Sep 17 00:00:00 2001 From: Julian Lam Date: Wed, 20 Jul 2022 17:02:27 -0400 Subject: [PATCH] fix: expire email validation tokens on password change --- src/user/profile.js | 1 + 1 file changed, 1 insertion(+) diff --git a/src/user/profile.js b/src/user/profile.js index 66ca35d789..fc238ff87c 100644 --- a/src/user/profile.js +++ b/src/user/profile.js @@ -327,6 +327,7 @@ module.exports = function (User) { User.reset.cleanByUid(data.uid), User.reset.updateExpiry(data.uid), User.auth.revokeAllSessions(data.uid), + User.email.expireValidation(data.uid), ]); plugins.hooks.fire('action:password.change', { uid: uid, targetUid: data.uid });