Making the verification and password reset token unqiue

Sylius · Nov 3, 2023 · 052a759 · 052a759
1 parent 9518e82
commit 052a759
Show file tree

Hide file tree

Showing 2 changed files with 39 additions and 2 deletions.
diff --git a/src/Sylius/Bundle/CoreBundle/Migrations/Version20231103004216.php b/src/Sylius/Bundle/CoreBundle/Migrations/Version20231103004216.php
@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Sylius\Bundle\CoreBundle\Migrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+/**
+ * Auto-generated Migration: Please modify to your needs!
+ */
+final class Version20231103004216 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Making the uniqueness of the password_reset_token and email_verification_token a database constraint';
+    }
+
+    public function up(Schema $schema): void
+    {
+        // this up() migration is auto-generated, please modify it to your needs
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_88D5CC4D6B7BA4B6 ON sylius_admin_user (password_reset_token)');
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_88D5CC4DC4995C67 ON sylius_admin_user (email_verification_token)');
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_7C2B74806B7BA4B6 ON sylius_shop_user (password_reset_token)');
+        $this->addSql('CREATE UNIQUE INDEX UNIQ_7C2B7480C4995C67 ON sylius_shop_user (email_verification_token)');
+    }
+
+    public function down(Schema $schema): void
+    {
+        // this down() migration is auto-generated, please modify it to your needs
+        $this->addSql('DROP INDEX UNIQ_88D5CC4D6B7BA4B6 ON sylius_admin_user');
+        $this->addSql('DROP INDEX UNIQ_88D5CC4DC4995C67 ON sylius_admin_user');
+        $this->addSql('DROP INDEX UNIQ_7C2B74806B7BA4B6 ON sylius_shop_user');
+        $this->addSql('DROP INDEX UNIQ_7C2B7480C4995C67 ON sylius_shop_user');
+    }
+}
diff --git a/src/Sylius/Bundle/UserBundle/Resources/config/doctrine/model/User.orm.xml b/src/Sylius/Bundle/UserBundle/Resources/config/doctrine/model/User.orm.xml
@@ -25,9 +25,9 @@
         <field name="encoderName" column="encoder_name" type="string" nullable="true" />
 
         <field name="lastLogin" column="last_login" type="datetime" nullable="true" />
-        <field name="passwordResetToken" column="password_reset_token" type="string" nullable="true" />
+        <field name="passwordResetToken" column="password_reset_token" type="string" nullable="true" unique="true" />
         <field name="passwordRequestedAt" column="password_requested_at" type="datetime" nullable="true" />
-        <field name="emailVerificationToken" column="email_verification_token" type="string" nullable="true" />
+        <field name="emailVerificationToken" column="email_verification_token" type="string" nullable="true" unique="true" />
         <field name="verifiedAt" column="verified_at" type="datetime" nullable="true" />
 
         <field name="locked" column="locked" type="boolean" nullable="false" />