Merge pull request #514 from matrix-org/dbkr/prevent_email_spam

Prevent spamming emails by reusing client secret
2016-10-12 14:40:39 +01:00
parent 213e3dab35 c45b076df9
commit 999a9e34b9
2 changed files with 17 additions and 1 deletions
@@ -116,7 +116,11 @@ class EmailIdentityStage extends Stage {
            return this._completeVerify();
        }

-        this.clientSecret = this.client.generateClientSecret();
+        this.clientSecret = this.signupInstance.params.clientSecret;
+        if (!this.clientSecret) {
+            return q.reject(new Error("No client secret specified by Signup class!"));
+        }
+
        var nextLink = this.signupInstance.params.registrationUrl +
                       '?client_secret=' +
                       encodeURIComponent(this.clientSecret) +