Tests

Author: aaronn

drfpasswordless/utils.py

@@ -85,9 +85,11 @@ def verify_user_alias(user, token):
     Marks a user's contact point as verified depending on accepted token type.
     """
     if token.to_alias_type == 'EMAIL':
-        setattr(user, api_settings.PASSWORDLESS_USER_EMAIL_VERIFIED_FIELD_NAME, True)
+        if token.to_alias == getattr(user, api_settings.PASSWORDLESS_USER_EMAIL_FIELD_NAME):
+            setattr(user, api_settings.PASSWORDLESS_USER_EMAIL_VERIFIED_FIELD_NAME, True)
     elif token.to_alias_type == 'MOBILE':
-        setattr(user, api_settings.PASSWORDLESS_USER_MOBILE_VERIFIED_FIELD_NAME, True)
+        if token.to_alias == getattr(user, api_settings.PASSWORDLESS_USER_MOBILE_FIELD_NAME):
+            setattr(user, api_settings.PASSWORDLESS_USER_MOBILE_VERIFIED_FIELD_NAME, True)
     else:
         return False
     user.save()