Encode invitee email in the invitation link (#10842)

This commit is contained in:
Rhys 2024-11-19 20:08:37 +07:00 committed by GitHub
parent 2dc29cfee3
commit 6f4885d86d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,3 +1,5 @@
from urllib import parse
from flask_login import current_user from flask_login import current_user
from flask_restful import Resource, abort, marshal_with, reqparse from flask_restful import Resource, abort, marshal_with, reqparse
@ -57,11 +59,12 @@ class MemberInviteEmailApi(Resource):
token = RegisterService.invite_new_member( token = RegisterService.invite_new_member(
inviter.current_tenant, invitee_email, interface_language, role=invitee_role, inviter=inviter inviter.current_tenant, invitee_email, interface_language, role=invitee_role, inviter=inviter
) )
encoded_invitee_email = parse.quote(invitee_email)
invitation_results.append( invitation_results.append(
{ {
"status": "success", "status": "success",
"email": invitee_email, "email": invitee_email,
"url": f"{console_web_url}/activate?email={invitee_email}&token={token}", "url": f"{console_web_url}/activate?email={encoded_invitee_email}&token={token}",
} }
) )
except AccountAlreadyInTenantError: except AccountAlreadyInTenantError: