Prevent accepting another user invitation #265

New Issue

AtHeartEngineer · 2025-07-08T08:44:48-04:00

AtHeartEngineer commented

2025-07-08 08:44:48 -04:00

Originally created by @Timshel on 1/17/2025

With the change around the invitation remembered that it was possible to accept another user invitation if you have the link.

Since the accept_invite is done after the user is logged it's possible to use the header guards and ensure the correct user is making the call.

Note on the error message the popup title already include Unable to accept invitation, so just used a short error message.

Might be easier to just integrate the change in https://github.com/dani-garcia/vaultwarden/pull/5403 or I'll just rebase afterward.

*Originally created by @Timshel on 1/17/2025* With the change around the invitation remembered that it was possible to accept another user invitation if you have the link. Since the `accept_invite` is done after the user is logged it's possible to use the header guards and ensure the correct user is making the call. Note on the error message the popup title already include `Unable to accept invitation`, so just used a short error message. Might be easier to just integrate the change in https://github.com/dani-garcia/vaultwarden/pull/5403 or I'll just rebase afterward.

AtHeartEngineer closed this issue

2025-07-08 08:44:49 -04:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#265