diff --git a/src/server/lib/signin/email.js b/src/server/lib/signin/email.js index 3b5912ec55..54a466a6af 100644 --- a/src/server/lib/signin/email.js +++ b/src/server/lib/signin/email.js @@ -10,7 +10,7 @@ export default async function email (email, provider, options) { const secret = provider.secret || options.secret // Generate token - const token = randomBytes(32).toString('hex') + const token = provider.generateVerificationToken?.() ?? randomBytes(32).toString('hex') // Send email with link containing token (the unhashed version) const url = `${baseUrl}${basePath}/callback/${encodeURIComponent(provider.id)}?email=${encodeURIComponent(email)}&token=${encodeURIComponent(token)}`