Auth: Fix email verification bypass when using basic authentication (#83493)

2024-02-27 16:35:50 +01:00
parent cabbc0abaa
commit 4358fecffd
22 changed files with 1347 additions and 15 deletions
@@ -189,6 +189,11 @@ func (hs *HTTPServer) registerRoutes() {
 	r.Post("/api/user/signup", quota(user.QuotaTargetSrv), quota(org.QuotaTargetSrv), routing.Wrap(hs.SignUp))
 	r.Post("/api/user/signup/step2", routing.Wrap(hs.SignUpStep2))

+	// update user email
+	if hs.Cfg.Smtp.Enabled && setting.VerifyEmailEnabled {
+		r.Get("/user/email/update", reqSignedInNoAnonymous, routing.Wrap(hs.UpdateUserEmail))
+	}
+
 	// invited
 	r.Get("/api/user/invite/:code", routing.Wrap(hs.GetInviteInfoByCode))
 	r.Post("/api/user/invite/complete", routing.Wrap(hs.CompleteInvite))