supabase / gotrue / 6452939743

65%

push

github

feat: initial fix for invite followed by signup. (#1262)

## What kind of change does this PR introduce?

Currently, sending an `invite` request followed by a `signup` request
w/o confirmation between invite and signup will expose metadata on
UserMetadata and Identities which may be perceived as a leak of
sensitive information.

This PR aims to clear out such metadata for cases where the dev has been
invited before a signup


## Testing Instructions
How to test locally:

Use this admin bearer `jwt` 

1. Call  http://localhost:9999/invite to `myemail@gmail.com`
2. Wait 60s 
3. Call http://localhost:9999/signup with `myemail@gmail.com` and check
that `identities` field is blanked out

---------

Co-authored-by: joel@joellee.org <joel@joellee.org>
Co-authored-by: Stojan Dimitrovski <sdimitrovski@gmail.com>

8 of 8 new or added lines in 2 files covered. (100.0%)

7350 of 11211 relevant lines covered (65.56%)

51.87 hits per line