fix(account): Prevent reuse of email confirmation links

pennersr · Dec 8, 2023 · b0ae821 · b0ae821
1 parent 0c040aa
commit b0ae821
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/allauth/account/managers.py b/allauth/account/managers.py
@@ -125,7 +125,7 @@ def all_expired(self):
         return self.filter(self.expired_q())
 
     def all_valid(self):
-        return self.exclude(self.expired_q())
+        return self.exclude(self.expired_q()).filter(email_address__verified=False)
 
     def expired_q(self):
         sent_threshold = timezone.now() - timedelta(