3 Commits

Author	SHA1	Message	Date
Fabien 'egg' O'Carroll	7fdddf34b3	🐛 Added multiple use grace period to tokens (#12519) ... closes https://github.com/TryGhost/Ghost/issues/12347 This change allows a token to be used multiple times for the first 10 seconds after its initial use, this will stop dynamic link checking software from invaliding magic links.	2021-01-18 17:03:41 +00:00
Rishabh Garg	7182efdb88	🐛 Fixed special chars in single use token (#12290) ... no refs - The token generation logic for single use token was replacing only the first instance of + or / to make the token URL safe, instead of replacing all instances which caused a bug where token was not validated properly in case it included multiple + or / in it. - The fix ensures replacing all the + or / in the token with URL safe _ or - so it can be properly validated via magic link	2020-10-20 11:49:20 +05:30
Fabien 'egg' O'Carroll	812e4b682f	Added SingleUseToken model (#12215) ... no-issue This is a model for the tokens table, which handles the single use aspect by customising the `findOne` method to automatically destroy the model after reading from it	2020-09-18 15:05:56 +01:00