yusufipek/OpenFrame
1
0
Fork 0
mirror of https://github.com/yusufipk/OpenFrame.git synced 2026-09-11 09:36:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

refactor: eslint and prettier conflict will be resolved and formatted

Browse Source
This commit is contained in:
Enes Köksal
2026-04-23 17:05:43 +03:00
parent 385b61f29b
commit 3cfea40fbd
219 changed files with 16638 additions and 13663 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/auth/verify-email/resend/route.ts
+55 -46
View File
@@ -2,54 +2,63 @@ import { NextRequest } from 'next/server';
import { db } from '@/lib/db';
import { checkRateLimit, getClientIp } from '@/lib/rate-limit';
import { apiErrors, successResponse, withCacheControl } from '@/lib/api-response';
import { createVerificationToken, isEmailVerificationEnabled, sendVerificationEmail } from '@/lib/email-verification';
import {
createVerificationToken,
isEmailVerificationEnabled,
sendVerificationEmail,
} from '@/lib/email-verification';
import { logError } from '@/lib/logger';
export async function POST(request: NextRequest) {
try {
if (!isEmailVerificationEnabled()) {
return apiErrors.badRequest('Email verification is not enabled');
}
// Rate-limit by IP to prevent abuse
const clientIp = getClientIp(request);
const rateLimitResult = await checkRateLimit(`resend-verification:${clientIp}`, 'resend-verification');
if (!rateLimitResult.allowed) {
return apiErrors.rateLimited('Too many requests. Please try again later.');
}
const body = await request.json();
const { email } = body;
if (!email || typeof email !== 'string' || email.length > 254 || !email.includes('@')) {
return apiErrors.badRequest('Valid email is required');
}
const normalizedEmail = email.toLowerCase().trim();
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
if (!emailRegex.test(normalizedEmail)) {
return apiErrors.badRequest('Valid email is required');
}
// Look up user — return a generic success regardless of whether the email
// exists to avoid user enumeration
const user = await db.user.findUnique({
where: { email: normalizedEmail },
select: { id: true, emailVerified: true },
});
if (user && !user.emailVerified) {
const token = await createVerificationToken(normalizedEmail);
await sendVerificationEmail(normalizedEmail, token);
}
return withCacheControl(
successResponse({ message: 'If that email has an unverified account, a new verification link has been sent.' }),
'private, no-store'
);
} catch (err) {
logError('Resend verification error:', err);
return apiErrors.internalError('Failed to resend verification email');
try {
if (!isEmailVerificationEnabled()) {
return apiErrors.badRequest('Email verification is not enabled');
}
// Rate-limit by IP to prevent abuse
const clientIp = getClientIp(request);
const rateLimitResult = await checkRateLimit(
`resend-verification:${clientIp}`,
'resend-verification'
);
if (!rateLimitResult.allowed) {
return apiErrors.rateLimited('Too many requests. Please try again later.');
}
const body = await request.json();
const { email } = body;
if (!email || typeof email !== 'string' || email.length > 254 || !email.includes('@')) {
return apiErrors.badRequest('Valid email is required');
}
const normalizedEmail = email.toLowerCase().trim();
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
if (!emailRegex.test(normalizedEmail)) {
return apiErrors.badRequest('Valid email is required');
}
// Look up user — return a generic success regardless of whether the email
// exists to avoid user enumeration
const user = await db.user.findUnique({
where: { email: normalizedEmail },
select: { id: true, emailVerified: true },
});
if (user && !user.emailVerified) {
const token = await createVerificationToken(normalizedEmail);
await sendVerificationEmail(normalizedEmail, token);
}
return withCacheControl(
successResponse({
message: 'If that email has an unverified account, a new verification link has been sent.',
}),
'private, no-store'
);
} catch (err) {
logError('Resend verification error:', err);
return apiErrors.internalError('Failed to resend verification email');
}
}
app/api/auth/verify-email/route.ts
+19 -19
View File
@@ -7,26 +7,26 @@ import { logError } from '@/lib/logger';
const TOKEN_REGEX = /^[0-9a-f]{64}$/;
export async function GET(request: NextRequest) {
try {
// Rate-limit by IP to prevent token enumeration attacks.
const limited = await rateLimit(request, 'verify-email');
if (limited) return limited;
try {
// Rate-limit by IP to prevent token enumeration attacks.
const limited = await rateLimit(request, 'verify-email');
if (limited) return limited;
const token = request.nextUrl.searchParams.get('token');
const token = request.nextUrl.searchParams.get('token');
if (!token || !TOKEN_REGEX.test(token.trim())) {
return NextResponse.redirect(new URL('/login?error=InvalidVerificationToken', request.url));
}
const email = await consumeVerificationToken(token.trim());
if (!email) {
return NextResponse.redirect(new URL('/login?error=InvalidVerificationToken', request.url));
}
return NextResponse.redirect(new URL('/login?verified=true', request.url));
} catch (err) {
logError('Email verification error:', err);
return NextResponse.redirect(new URL('/login?error=VerificationFailed', request.url));
if (!token || !TOKEN_REGEX.test(token.trim())) {
return NextResponse.redirect(new URL('/login?error=InvalidVerificationToken', request.url));
}
const email = await consumeVerificationToken(token.trim());
if (!email) {
return NextResponse.redirect(new URL('/login?error=InvalidVerificationToken', request.url));
}
return NextResponse.redirect(new URL('/login?verified=true', request.url));
} catch (err) {
logError('Email verification error:', err);
return NextResponse.redirect(new URL('/login?error=VerificationFailed', request.url));
}
}