1 files changed, 2 insertions, 3 deletions
diff --git a/src/CamilStaps/BotleaguesApi/ActivationCodeAuthenticationProvider.php b/src/CamilStaps/BotleaguesApi/ActivationCodeAuthenticationProvider.php
index 049dfc4..3fe3ee0 100644
--- a/src/CamilStaps/BotleaguesApi/ActivationCodeAuthenticationProvider.php
+++ b/src/CamilStaps/BotleaguesApi/ActivationCodeAuthenticationProvider.php
@@ -31,10 +31,9 @@ class ActivationCodeAuthenticationProvider implements Provider {
      */
     public function authenticate(Request $request, Route $route) {
         $user = User::findOrFail($request->route('user'));
-        $passwordReminder = PasswordReminder::find($request->route('password_reminder'));
+        $passwordReminder = PasswordReminder::findOrFail($request->route('password_reminder'));
 
-        if (!empty($user) && !empty($passwordReminder) && $passwordReminder->userId == $user->id) {
-            $passwordReminder->useToken();
+        if (!empty($user) && !empty($passwordReminder) && $passwordReminder->userId == $user->id && $passwordReminder->isValid()) {
             Auth::login($user);
             return Auth::user();
         }