[admin] Allow manual user verification

components/dashboard/src/admin/UserDetail.tsx

@@ -75,6 +75,12 @@ export default function UserDetail(p: { user: User }) {
         });
     };
 
+    const verifyUser = async () => {
+        await updateUser(async (u) => {
+            return await getGitpodService().server.adminVerifyUser(u.id);
+        });
+    };
+
     const toggleBlockUser = async () => {
         await updateUser(async (u) => {
             u.blocked = !u.blocked;
@@ -132,6 +138,11 @@ export default function UserDetail(p: { user: User }) {
                                 .join(", ")}
                         </p>
                     </div>
+                    {!user.lastVerificationTime ? (
+                        <button className="secondary danger ml-3" disabled={activity} onClick={verifyUser}>
+                            Verify User
+                        </button>
+                    ) : null}
                     <button className="secondary danger ml-3" disabled={activity} onClick={toggleBlockUser}>
                         {user.blocked ? "Unblock" : "Block"} User
                     </button>

components/gitpod-protocol/src/admin-protocol.ts

@@ -18,6 +18,7 @@ export interface AdminServer {
     adminGetUser(id: string): Promise<User>;
     adminBlockUser(req: AdminBlockUserRequest): Promise<User>;
     adminDeleteUser(id: string): Promise<void>;
+    adminVerifyUser(id: string): Promise<User>;
     adminModifyRoleOrPermission(req: AdminModifyRoleOrPermissionRequest): Promise<User>;
     adminModifyPermanentWorkspaceFeatureFlag(req: AdminModifyPermanentWorkspaceFeatureFlagRequest): Promise<User>;
 

components/server/ee/src/workspace/gitpod-server-impl.ts

@@ -643,6 +643,23 @@ export class GitpodServerEEImpl extends GitpodServerImpl {
         return this.censorUser(targetUser);
     }
 
+    async adminVerifyUser(ctx: TraceContext, userId: string): Promise<User> {
+        await this.requireEELicense(Feature.FeatureAdminDashboard);
+
+        await this.guardAdminAccess("adminVerifyUser", { id: userId }, Permission.ADMIN_USERS);
+        try {
+            const user = await this.userDB.findUserById(userId);
+            if (!user) {
+                throw new ResponseError(ErrorCodes.NOT_FOUND, `No user with id ${userId} found.`);
+            }
+            this.verificationService.markVerified(user);
+            await this.userDB.updateUserPartial(user);
+            return user;
+        } catch (e) {
+            throw new ResponseError(ErrorCodes.INTERNAL_SERVER_ERROR, e.toString());
+        }
+    }
+
     async adminDeleteUser(ctx: TraceContext, userId: string): Promise<void> {
         traceAPIParams(ctx, { userId });
 

components/server/src/auth/rate-limiter.ts

@@ -150,6 +150,7 @@ function getConfig(config: RateLimiterConfig): RateLimiterConfig {
         adminGetUser: { group: "default", points: 1 },
         adminBlockUser: { group: "default", points: 1 },
         adminDeleteUser: { group: "default", points: 1 },
+        adminVerifyUser: { group: "default", points: 1 },
         adminModifyRoleOrPermission: { group: "default", points: 1 },
         adminModifyPermanentWorkspaceFeatureFlag: { group: "default", points: 1 },
         adminGetTeams: { group: "default", points: 1 },

components/server/src/workspace/gitpod-server-impl.ts

@@ -2695,6 +2695,10 @@ export class GitpodServerImpl implements GitpodServerWithTracing, Disposable {
         throw new ResponseError(ErrorCodes.EE_FEATURE, `Admin support is implemented in Gitpod's Enterprise Edition`);
     }
 
+    async adminVerifyUser(ctx: TraceContext, _id: string): Promise<User> {
+        throw new ResponseError(ErrorCodes.EE_FEATURE, `Admin support is implemented in Gitpod's Enterprise Edition`);
+    }
+
     async adminModifyRoleOrPermission(ctx: TraceContext, req: AdminModifyRoleOrPermissionRequest): Promise<User> {
         throw new ResponseError(ErrorCodes.EE_FEATURE, `Admin support is implemented in Gitpod's Enterprise Edition`);
     }