From a0ef32f4f66a1de2c591edd88aba4288a1b794a5 Mon Sep 17 00:00:00 2001 From: Johann150 Date: Sun, 23 Oct 2022 23:00:25 +0200 Subject: [PATCH] server: properly delete expired password reset requests Changelog: Fixed --- .../backend/src/queue/processors/system/check-expired.ts | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/packages/backend/src/queue/processors/system/check-expired.ts b/packages/backend/src/queue/processors/system/check-expired.ts index 7078d3ccb..5608dc43c 100644 --- a/packages/backend/src/queue/processors/system/check-expired.ts +++ b/packages/backend/src/queue/processors/system/check-expired.ts @@ -1,6 +1,6 @@ import Bull from 'bull'; import { In, LessThan } from 'typeorm'; -import { AttestationChallenges, Mutings, Signins } from '@/models/index.js'; +import { AttestationChallenges, Mutings, PasswordResetRequests, Signins } from '@/models/index.js'; import { publishUserEvent } from '@/services/stream.js'; import { MINUTE, DAY } from '@/const.js'; import { queueLogger } from '@/queue/logger.js'; @@ -35,6 +35,11 @@ export async function checkExpired(job: Bull.Job>, done: createdAt: LessThan(new Date(new Date().getTime() - 5 * MINUTE)), }); + await PasswordResetRequests.delete({ + // this timing should be the same as in @/server/api/endpoints/reset-password.ts + createdAt: LessThan(new Date(new Date().getTime() - 30 * MINUTE)), + }); + logger.succ('Deleted expired mutes, signins and attestation challenges.'); done();