Sfoglia il codice sorgente

password reset expiration time changed to 10 minutes

Shun Miyazawa 4 anni fa
parent
commit
439976f57d

+ 1 - 1
packages/app/resource/locales/en_US/notifications/passwordReset.txt

@@ -7,6 +7,6 @@ To reset your password, click on the link below.
 
 {{ url }}
 
-This link will expire in 1 hour at  {{ expiredAt }}.
+This link will expire in 10 minutes at  {{ expiredAt }}.
 
 If you did not request a password reset, you can safely ignore this email.

+ 1 - 1
packages/app/resource/locales/ja_JP/notifications/passwordReset.txt

@@ -7,6 +7,6 @@
 
 {{ url }}
 
-このリンクは1時間後の {{ expiredAt }} に失効します。
+このリンクは10分後の {{ expiredAt }} に失効します。
 
 もしこのリクエストに心当たりがない場合は、このメールを無視してください。

+ 1 - 1
packages/app/resource/locales/zh_CN/notifications/passwordReset.txt

@@ -7,6 +7,6 @@
 
 {{ url }}
 
-这个链接将在1小时后即{{ expiredAt }}失效。
+这个链接在10分钟后的{ expiredAt }}失效。
 
 如果您没有要求重置密码,则可以放心地忽略此电子邮件。

+ 2 - 2
packages/app/src/server/models/password-reset-order.ts

@@ -2,7 +2,7 @@ import mongoose, {
   Schema, Model, Document,
 } from 'mongoose';
 
-import { addHours } from 'date-fns';
+import { addMinutes } from 'date-fns';
 import uniqueValidator from 'mongoose-unique-validator';
 import crypto from 'crypto';
 import { getOrCreateModel } from '@growi/core';
@@ -30,7 +30,7 @@ export interface PasswordResetOrderModel extends Model<PasswordResetOrderDocumen
 }
 
 const expiredAt = (): Date => {
-  return addHours(new Date(), 1);
+  return addMinutes(new Date(), 10);
 };
 
 const schema = new Schema<PasswordResetOrderDocument, PasswordResetOrderModel>({

+ 1 - 0
packages/app/src/server/routes/user-activation.ts

@@ -23,6 +23,7 @@ async function makeRegistrationEmailToken(email, crowi) {
 
   const userRegistrationOrder = await UserRegistrationOrder.createUserRegistrationOrder(email);
   const expiredAt = format(userRegistrationOrder.expiredAt, 'yyyy/MM/dd HH:mm');
+  console.log(expiredAt);
   const url = new URL(`/user-activation/${userRegistrationOrder.token}`, appUrl);
   const oneTimeUrl = url.href;
   const txtFileName = 'userActivation';