resolves #6

evo-doc · Apr 29, 2018 · 274a9af · 274a9af
1 parent 5f74050
commit 274a9af
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/evodoc/api/userapi.py b/evodoc/api/userapi.py
@@ -105,7 +105,7 @@ def activation_action():
         user_id = data['user_id']
         user = User.get_user_by_id(user_id)
         token = check_token_exists(data['token'])
-        if token == None:
+        if token == None or token.user_id != user_id:
             raise ApiException(403, "Invalid token")
         if user.activated:
             raise ApiException(401, "User has been already activated.")