From 6ff8eec72269658d58642194e6d15c5b3c6be713 Mon Sep 17 00:00:00 2001
From: Puyodead1 <puyodead@proton.me>
Date: Fri, 5 Sep 2025 18:35:50 -0400
Subject: [PATCH] prevent re-verifying email

---
 src/api/routes/auth/verify/resend.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/api/routes/auth/verify/resend.ts b/src/api/routes/auth/verify/resend.ts
index 701f0ea8..1577d5ec 100644
--- a/src/api/routes/auth/verify/resend.ts
+++ b/src/api/routes/auth/verify/resend.ts
@@ -39,7 +39,7 @@ router.post(
 	async (req: Request, res: Response) => {
 		const user = await User.findOneOrFail({
 			where: { id: req.user_id },
-			select: ["username", "email"],
+			select: ["username", "email", "verified"],
 		});
 
 		if (!user.email) {
@@ -47,6 +47,10 @@ router.post(
 			throw new HTTPError("User does not have an email address", 400);
 		}
 
+		if (user.verified) {
+			throw new HTTPError("Email is already verified", 400);
+		}
+
 		await Email.sendVerifyEmail(user, user.email)
 			.then(() => {
 				return res.sendStatus(204);