discourse/app/jobs/scheduled/clean_up_email_tokens.rb

# frozen_string_literal: true

module Jobs
  class CleanUpEmailTokens < ::Jobs::Scheduled
    every 1.day

    def execute(args)
      EmailToken
        .where('NOT confirmed AND expired')
        .where('created_at < ?', 1.month.ago)
        .delete_all
    end
  end
end
DEV: Hash tokens stored from email_tokens (#14493) This commit adds token_hash and scopes columns to email_tokens table. token_hash is a replacement for the token column to avoid storing email tokens in plaintext as it can pose a security risk. The new scope column ensures that email tokens cannot be used to perform a different action than the one intended. To sum up, this commit: * Adds token_hash and scope to email_tokens * Reuses code that schedules critical_user_email * Refactors EmailToken.confirm and EmailToken.atomic_confirm methods * Periodically cleans old, unconfirmed or expired email tokens 2021-11-25 09:34:39 +02:00			`# frozen_string_literal: true`

			`module Jobs`
			`class CleanUpEmailTokens < ::Jobs::Scheduled`
			`every 1.day`

			`def execute(args)`
			`EmailToken`
FIX: Delete unconfirmed AND expired email tokens only (#15089) 2021-11-25 10:34:30 +02:00			`.where('NOT confirmed AND expired')`
DEV: Hash tokens stored from email_tokens (#14493) This commit adds token_hash and scopes columns to email_tokens table. token_hash is a replacement for the token column to avoid storing email tokens in plaintext as it can pose a security risk. The new scope column ensures that email tokens cannot be used to perform a different action than the one intended. To sum up, this commit: * Adds token_hash and scope to email_tokens * Reuses code that schedules critical_user_email * Refactors EmailToken.confirm and EmailToken.atomic_confirm methods * Periodically cleans old, unconfirmed or expired email tokens 2021-11-25 09:34:39 +02:00			`.where('created_at < ?', 1.month.ago)`
			`.delete_all`
			`end`
			`end`
			`end`