@adminforth/open-signup 1.2.24 → 1.2.26

package/dist/index.js

@@ -142,10 +142,14 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
             noAuth: true,
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, response, headers, query, cookies, tr, requestUrl }) {
                 const { token, password } = body;
-                const { email } = yield this.adminforth.auth.verify(token, 'tempVerifyEmailToken', false);
-                if (!email) {
+                if (!token) {
                     return { error: yield tr('Invalid token', 'opensignup'), ok: false };
                 }
+                const decoded = yield this.adminforth.auth.verify(token, 'tempVerifyEmailToken', false);
+                if (!decoded || !decoded.email) {
+                    return { error: yield tr('Invalid token', 'opensignup'), ok: false };
+                }
+                const { email } = decoded;
                 if (!password) {
                     return { error: yield tr('Password is required', 'opensignup'), ok: false };
                 }
@@ -170,6 +174,12 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
             handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, response, headers, query, cookies, tr, requestUrl }) {
                 var _b, _c;
                 const { email, url, password } = body;
+                if (!email || typeof email !== 'string') {
+                    return { error: yield tr('Email is required', 'opensignup'), ok: false };
+                }
+                if (!this.options.confirmEmails && !password) {
+                    return { error: yield tr('Password is required', 'opensignup'), ok: false };
+                }
                 const extra = { body, headers, query, cookies, requestUrl: url };
                 // validate email
                 if (this.emailField.validation) {

package/index.ts

@@ -165,10 +165,14 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
       noAuth: true,
       handler: async ({ body, response, headers, query, cookies, tr, requestUrl }) => {
         const { token, password } = body;
-        const { email } = await this.adminforth.auth.verify(token, 'tempVerifyEmailToken', false);
-        if (!email) {
+        if (!token) {
           return { error: await tr('Invalid token', 'opensignup'), ok: false };
         }
+        const decoded = await this.adminforth.auth.verify(token, 'tempVerifyEmailToken', false);
+        if (!decoded || !decoded.email) {
+          return { error: await tr('Invalid token', 'opensignup'), ok: false };
+        }
+        const { email } = decoded;
 
         if(!password) {
           return { error: await tr('Password is required', 'opensignup'), ok: false };
@@ -196,6 +200,12 @@ export default class OpenSignupPlugin extends AdminForthPlugin {
       noAuth: true,
       handler: async ({ body, response, headers, query, cookies, tr, requestUrl }) => {
         const { email, url, password } = body;
+        if (!email || typeof email !== 'string') {
+          return { error: await tr('Email is required', 'opensignup'), ok: false };
+        }
+        if (!this.options.confirmEmails && !password) {
+          return { error: await tr('Password is required', 'opensignup'), ok: false };
+        }
         const extra = { body, headers, query, cookies, requestUrl: url };
         // validate email
         if (this.emailField.validation) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/open-signup",
-  "version": "1.2.24",
+  "version": "1.2.26",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
@@ -26,11 +26,11 @@
     "@aws-sdk/client-ses": "^3.654.0"
   },
   "peerDependencies": {
-    "adminforth": "^3.6.2"
+    "adminforth": "^3.6.21"
   },
   "devDependencies": {
     "@types/node": "^22.10.7",
-    "adminforth": "^3.6.2",
+    "adminforth": "^3.6.21",
     "semantic-release": "^24.2.1",
     "semantic-release-slack-bot": "^4.0.2",
     "typescript": "^5.7.3"