Merge pull request #19963 from mozilla/stricter-status-check

dschom · web-flow · commit dae8ad7a39c7 · 2026-01-28T10:36:42.000-08:00
task(auth): Make account status customs check more strict
diff --git a/packages/fxa-auth-server/lib/routes/account.ts b/packages/fxa-auth-server/lib/routes/account.ts
@@ -1604,6 +1604,9 @@ export class AccountHandler {
         result.hasPassword = account.verifierSetAt > 0;
       } else {
         const exist = await this.db.accountExists(email);
+        if (!exist) {
+          await this.customs.check(request, email, 'accountStatusCheckFailed');
+        }
         result.exists = exist;
       }
 

Original file line number	Diff line number	Diff line change
`@@ -1604,6 +1604,9 @@ export class AccountHandler {`
`1604`	`1604`	`result.hasPassword = account.verifierSetAt > 0;`
`1605`	`1605`	`} else {`
`1606`	`1606`	`const exist = await this.db.accountExists(email);`
	`1607`	`+ if (!exist) {`
	`1608`	`+ await this.customs.check(request, email, 'accountStatusCheckFailed');`
	`1609`	`+ }`
`1607`	`1610`	`result.exists = exist;`
`1608`	`1611`	`}`
`1609`	`1612`