freeCodeCamp/api-server/server/middlewares/email-not-verified-notice.js

35 lines
883 B
JavaScript
Raw Normal View History

import dedent from 'dedent';
const ALLOWED_METHODS = ['GET'];
const EXCLUDED_PATHS = [
'/api/flyers/findOne',
'/signout',
'/accept-privacy-terms',
'/update-email',
2018-07-28 07:04:27 +00:00
'/confirm-email',
2018-05-27 14:11:58 +00:00
'/passwordless-change',
'/external/services/user'
];
export default function emailNotVerifiedNotice() {
return function(req, res, next) {
if (
ALLOWED_METHODS.indexOf(req.method) !== -1 &&
EXCLUDED_PATHS.indexOf(req.path) === -1
) {
const { user } = req;
if (user && (!user.email || user.email === '' || !user.emailVerified)) {
req.flash(
2018-05-30 20:05:24 +00:00
'info',
dedent`
New privacy laws now require that we have an email address where we can reach
you. Please update your email address in the <a href='/settings'>settings</a>
and click the link we send you to confirm.
`
);
}
}
return next();
};
}