Skip to content

Commit d3d5fa3

Browse files
committed
Check for invite ID with user ID
1 parent 123a423 commit d3d5fa3

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

internal/organizations/service.go

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -509,7 +509,7 @@ func (s *service) GetOrganizationFromInvite(ctx context.Context, organizationID
509509
}
510510

511511
// Check if the invite is valid.
512-
if invite.InviteeEmail != user.Email || invite.Key != inviteKey || invite.OrganizationID != organizationID {
512+
if (invite.InviteeEmail != user.Email && invite.InviteeID != user.ID) || invite.Key != inviteKey || invite.OrganizationID != organizationID {
513513
return nil, NewErrInviteInvalid()
514514
}
515515

@@ -531,7 +531,7 @@ func (s *service) AcceptInvite(ctx context.Context, organizationID int64, userID
531531
}
532532

533533
// Check if the invite is valid.
534-
if invite.InviteeEmail != user.Email || invite.Key != inviteKey || invite.OrganizationID != organizationID {
534+
if (invite.InviteeEmail != user.Email && invite.InviteeID != user.ID) || invite.Key != inviteKey || invite.OrganizationID != organizationID {
535535
return NewErrInviteInvalid()
536536
}
537537

@@ -563,7 +563,7 @@ func (s *service) DeclineInvite(ctx context.Context, organizationID int64, userI
563563
}
564564

565565
// Check if the invite is valid.
566-
if invite.InviteeEmail != user.Email || invite.Key != inviteKey || invite.OrganizationID != organizationID {
566+
if (invite.InviteeEmail != user.Email && invite.InviteeID != user.ID) || invite.Key != inviteKey || invite.OrganizationID != organizationID {
567567
return NewErrInviteInvalid()
568568
}
569569

0 commit comments

Comments
 (0)