GRN2-233: Made account activation & password reset links based on tokens only (#959)

* GRN2-233: Hiding email in verification link and password reset link

* updating tests

* removing uid from email verificaiton link

* GRN2-233: modifying test cases

* GRN2-233: Removing uid from password reset link

* GRN2-233: Removed email_params and fixed "authenticated?" method

* GRN2-233: Fixed error when trying to sign in unverified

* GRN2-233: Changed how activation tokens are generated
This commit is contained in:
etiennevvv
2020-02-24 13:05:09 -05:00
committed by GitHub
parent b7aa5406ea
commit 03266730e8
10 changed files with 42 additions and 46 deletions

View File

@ -125,7 +125,7 @@ module Emailer
# Returns the link the user needs to click to verify their account
def user_verification_link(user)
edit_account_activation_url(token: user.activation_token, email: user.email)
edit_account_activation_url(token: user.activation_token)
end
def admin_emails
@ -140,7 +140,7 @@ module Emailer
end
def reset_link(user)
edit_password_reset_url(user.reset_token, email: user.email)
edit_password_reset_url(user.reset_token)
end
def invitation_link(token)