watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2025-12-08 05:12:36 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

Fixed password update.

Browse source
This commit is contained in:
Mike Cao 2023-04-02 14:23:21 -07:00
parent 2713e3316a
commit 8b966a04b0
2 changed files with 2 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

8
pages/api/me/password.ts
View file

@ -1,5 +1,4 @@
import { NextApiRequestQueryBody, User } from 'lib/types';
import { canUpdateUser } from 'lib/auth';
import { useAuth } from 'lib/middleware';
import { NextApiResponse } from 'next';
import {
@ -9,7 +8,6 @@ import {
methodNotAllowed,
forbidden,
ok,
unauthorized,
} from 'next-basics';
import { getUser, updateUser } from 'queries';
@ -33,13 +31,9 @@ export default async (
await useAuth(req, res);
const { currentPassword, newPassword } = req.body;
const { id } = req.query;
const { id } = req.auth.user;
if (req.method === 'POST') {
if (!(await canUpdateUser(req.auth, id))) {
return unauthorized(res);
}
const user = await getUser({ id }, { includePassword: true });
if (!checkPassword(currentPassword, user.password)) {