From 787691859d2d4e85eff1e76647a4be84ec10aea7 Mon Sep 17 00:00:00 2001
From: Elliot DeNolf <denolfe@gmail.com>
Date: Tue, 13 Oct 2020 16:48:06 -0400
Subject: [PATCH] remove verificationToken after verified

---
 src/auth/operations/verifyEmail.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/auth/operations/verifyEmail.js b/src/auth/operations/verifyEmail.js
index 1f9d3cd6fd..12401edbd2 100644
--- a/src/auth/operations/verifyEmail.js
+++ b/src/auth/operations/verifyEmail.js
@@ -18,6 +18,7 @@ async function verifyEmail(args) {
   if (user && user._verified === true) throw new APIError('Already activated', httpStatus.ACCEPTED);
 
   user._verified = true;
+  user._verificationToken = undefined;
 
   await user.save();
   return true;