maroandClaude Sonnet 5
1cd15aff25
- Customer accounts now require email verification (hashed, single-use, time-limited tokens) before they can request/confirm bookings, with resend flows on login/account/booking widget and rate limiting. - Admins get a private, rotatable iCalendar (ICS) subscription feed of their confirmed bookings and public events, timezone-correct for Europe/Berlin including DST, never exposing meeting passwords. - Adds a full SEO layer: per-page canonical/OG/Twitter metadata with CMS-editable overrides and content-derived fallbacks, a dynamic sitemap.xml and robots.txt driven by real published content, JSON-LD (Organization/LocalBusiness, WebSite, WebPage, BreadcrumbList, Service, Event, BlogPosting) that never fabricates data, and a CMS-managed redirect table for changed slugs. - Global ANOUMA-naming audit: the brand name is never used to label personal account/calendar areas anywhere in the app, CMS, or emails. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
39 lines
1.2 KiB
TypeScript
39 lines
1.2 KiB
TypeScript
import { getCMS } from "@/lib/payload/getPayload";
|
|
import { hashVerificationToken } from "@/lib/auth/verification";
|
|
|
|
const TOKEN_SHAPE = /^[0-9a-f]{64}$/i;
|
|
|
|
/**
|
|
* Verifies a token from a /auth/verify-email/[token] link: looks it up by
|
|
* hash (the plaintext is never stored), checks it hasn't expired, then
|
|
* marks the account verified and immediately clears the hash + expiry so
|
|
* the same link can never be used a second time.
|
|
*/
|
|
export async function verifyEmailToken(token: string): Promise<boolean> {
|
|
if (!TOKEN_SHAPE.test(token)) return false;
|
|
|
|
const payload = await getCMS();
|
|
const hash = hashVerificationToken(token);
|
|
|
|
const { docs } = await payload.find({
|
|
collection: "customers",
|
|
where: { emailVerificationTokenHash: { equals: hash } },
|
|
limit: 1,
|
|
});
|
|
const customer = docs[0];
|
|
if (!customer || !customer.emailVerificationExpires) return false;
|
|
if (new Date(customer.emailVerificationExpires).getTime() < Date.now()) return false;
|
|
|
|
await payload.update({
|
|
collection: "customers",
|
|
id: customer.id,
|
|
data: {
|
|
emailVerified: true,
|
|
emailVerificationTokenHash: null,
|
|
emailVerificationExpires: null,
|
|
},
|
|
});
|
|
|
|
return true;
|
|
}
|