Merge pull request #27757 from overleaf/rh-secondary-email-alert

Only send security alert email after successful addEmailAddress call

GitOrigin-RevId: 391e613b0f855a5d2187b1da87355e0dbb10044d
This commit is contained in:
roo hutton
2025-08-12 13:12:35 +01:00
committed by Copybot
parent 8acb7af2b9
commit cd2fe857ed

View File

@@ -301,7 +301,6 @@ const checkNewSecondaryEmailConfirmationCode = _checkConfirmationCode(
req.ip,
{ newSecondaryEmail: email }
)
await _sendSecurityAlertEmail(user, email)
await UserUpdater.promises.addEmailAddress(
user._id,
email,
@@ -311,6 +310,7 @@ const checkNewSecondaryEmailConfirmationCode = _checkConfirmationCode(
ipAddress: req.ip,
}
)
await _sendSecurityAlertEmail(user, email)
}
)