import type { IUser } from '@rocket.chat/core-typings'; import type { ServerMethods } from '@rocket.chat/ddp-client'; import { check } from 'meteor/check'; import { Meteor } from 'meteor/meteor'; import { settings } from '../../../settings/server'; import { setEmail } from '../functions/setEmail'; import { RateLimiter } from '../lib'; declare module '@rocket.chat/ddp-client' { // eslint-disable-next-line @typescript-eslint/naming-convention interface ServerMethods { setEmail(email: string): string; } } export const setEmailFunction = async (email: string, user: Meteor.User | IUser) => { check(email, String); if (!settings.get('Accounts_AllowEmailChange')) { throw new Meteor.Error('error-action-not-allowed', 'Changing email is not allowed', { method: 'setEmail', action: 'Changing_email', }); } if (user.emails?.[0] && user.emails[0].address === email) { return email; } if (!(await setEmail(user._id, email))) { throw new Meteor.Error('error-could-not-change-email', 'Could not change email', { method: 'setEmail', }); } return email; }; Meteor.methods({ async setEmail(email) { const user = await Meteor.userAsync(); if (!user) { throw new Meteor.Error('error-invalid-user', 'Invalid user', { method: 'setEmail' }); } return setEmailFunction(email, user); }, }); RateLimiter.limitMethod('setEmail', 1, 1000, { userId(/* userId*/) { return true; }, });