From 31446aaa0e9aa7bae82ab3275344c68bc7b07c41 Mon Sep 17 00:00:00 2001 From: Ulf Gebhardt Date: Wed, 28 Jun 2023 11:16:48 +0200 Subject: [PATCH] do not allow to reset password when user is deleted --- backend/src/graphql/resolver/UserResolver.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/backend/src/graphql/resolver/UserResolver.ts b/backend/src/graphql/resolver/UserResolver.ts index 9df6b861b..ad95505b3 100644 --- a/backend/src/graphql/resolver/UserResolver.ts +++ b/backend/src/graphql/resolver/UserResolver.ts @@ -352,7 +352,8 @@ export class UserResolver { const user = await findUserByEmail(email).catch(() => { logger.warn(`fail on find UserContact per ${email}`) }) - if (!user) { + + if (!user || user.deletedAt) { logger.warn(`no user found with ${email}`) return true }