From cc1101ac43dd1f76dbbf9f8dbfa68d54a4e80d2c Mon Sep 17 00:00:00 2001
From: Udit Takkar <53316345+Udit-takkar@users.noreply.github.com>
Date: Sat, 28 Dec 2024 02:32:05 +0530
Subject: [PATCH] refactor: email handler (#18391)

Co-authored-by: Bailey Pumfleet <bailey@pumfleet.co.uk>
---
 .../viewer/auth/resendVerifyEmail.handler.ts        | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/packages/trpc/server/routers/viewer/auth/resendVerifyEmail.handler.ts b/packages/trpc/server/routers/viewer/auth/resendVerifyEmail.handler.ts
index 7ddece6c1d..bf0a2ed8a1 100644
--- a/packages/trpc/server/routers/viewer/auth/resendVerifyEmail.handler.ts
+++ b/packages/trpc/server/routers/viewer/auth/resendVerifyEmail.handler.ts
@@ -1,14 +1,20 @@
+import type { NextApiRequest } from "next";
+
 import { sendEmailVerification } from "@calcom/features/auth/lib/verifyEmail";
+import { checkRateLimitAndThrowError } from "@calcom/lib/checkRateLimitAndThrowError";
+import getIP from "@calcom/lib/getIP";
 import logger from "@calcom/lib/logger";
 import { prisma } from "@calcom/prisma";
 import { TRPCError } from "@calcom/trpc/server";
 
+import type { TRPCContext } from "../../../createContext";
 import type { TrpcSessionUser } from "../../../trpc";
 import type { TResendVerifyEmailSchema } from "./resendVerifyEmail.schema";
 
 type ResendEmailOptions = {
   ctx: {
     user: NonNullable<TrpcSessionUser>;
+    req: TRPCContext["req"] | undefined;
   };
   input: TResendVerifyEmailSchema;
 };
@@ -17,6 +23,13 @@ const log = logger.getSubLogger({ prefix: [`[[Auth] `] });
 
 export const resendVerifyEmail = async ({ input, ctx }: ResendEmailOptions) => {
   let emailToVerify = ctx.user.email;
+  const identifer = ctx.req ? getIP(ctx.req as NextApiRequest) : emailToVerify;
+
+  await checkRateLimitAndThrowError({
+    rateLimitingType: "core",
+    identifier: `resendVerifyEmail.${identifer}`,
+  });
+
   let emailVerified = Boolean(ctx.user.emailVerified);
   let secondaryEmail;
   // If the input which is coming is not the current user's email, it could be a secondary email