IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

SECURITY: Only allow users to resend activation email with a valid session.

Browse Source 
* Improve error when an active user tries to request for an activation email.
This commit is contained in:
Guo Xiang Tan
2017-03-13 19:19:42 +08:00
parent dd60cb82c3
commit 7ebfa3c901
5 changed files with 51 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
app/assets/javascripts/discourse/controllers/not-activated.js.es6
View File

@@ -1,4 +1,5 @@
import { ajax } from 'discourse/lib/ajax';
import { popupAjaxError } from 'discourse/lib/ajax-error';
import ModalFunctionality from 'discourse/mixins/modal-functionality';
export default Ember.Controller.extend(ModalFunctionality, {
@@ -9,9 +10,13 @@ export default Ember.Controller.extend(ModalFunctionality, {
},
actions: {
sendActivationEmail: function() {
ajax('/users/action/send_activation_email', {data: {username: this.get('username')}, type: 'POST'});
this.set('emailSent', true);
sendActivationEmail() {
ajax('/users/action/send_activation_email', {
data: { username: this.get('username') },
type: 'POST'
}).then(() => {
this.set('emailSent', true);
}).catch(popupAjaxError);
}
}