import type { IUser } from '@rocket.chat/core-typings'; import type { ServerMethods } from '@rocket.chat/ddp-client'; import { check } from 'meteor/check'; import { Meteor } from 'meteor/meteor'; import { RateLimiterClass as RateLimiter } from '../../lib/RateLimiter'; import { methodDeprecationLogger } from '../../lib/deprecationWarningLogger'; import { setEmail } from '../../lib/users/setEmail'; import { settings } from '../../settings'; declare module '@rocket.chat/ddp-client' { // eslint-disable-next-line @typescript-eslint/naming-convention interface ServerMethods { setEmail(email: string): string; } } export const setEmailFunction = async (email: string, user: Meteor.User | IUser) => { check(email, String); if (!settings.get('Accounts_AllowEmailChange')) { throw new Meteor.Error('error-action-not-allowed', 'Changing email is not allowed', { method: 'setEmail', action: 'Changing_email', }); } if (user.emails?.[0]?.address === email) { return email; } if (!(await setEmail(user._id, email))) { throw new Meteor.Error('error-could-not-change-email', 'Could not change email', { method: 'setEmail', }); } return email; }; Meteor.methods({ async setEmail(email) { methodDeprecationLogger.method('setEmail', '9.0.0', '/v1/users.updateOwnBasicInfo'); const user = await Meteor.userAsync(); if (!user) { throw new Meteor.Error('error-invalid-user', 'Invalid user', { method: 'setEmail' }); } return setEmailFunction(email, user); }, }); RateLimiter.limitMethod('setEmail', 1, 1000, { userId(/* userId*/) { return true; }, });