return hunk

src/server/models/password-reset-order.js

@@ -8,6 +8,7 @@ const schema = new mongoose.Schema({
   token: { type: String, required: true, unique: true },
   email: { type: String, required: true },
   relatedUser: { type: ObjectId, ref: 'User' },
+  isRevoked: { type: Boolean, default: false, required: true },
   createdAt: { type: Date, default: Date.now, required: true },
   expiredAt: { type: Date, default: Date.now() + 600000, required: true },
 });
@@ -41,6 +42,12 @@ class PasswordResetOrder {
     return this.expiredAt.getTime() < Date.now();
   }
 
+  revokeOneTimeToken() {
+    this.isRevoked = true;
+    this.save();
+    return;
+  }
+
 }
 
 module.exports = function(crowi) {