watson/umami
1
0
Fork 0
mirror of https://github.com/umami-software/umami.git synced 2026-02-07 06:07:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Updated settings components.

Browse source
This commit is contained in:
Mike Cao 2023-01-20 17:12:53 -08:00
parent 1d9c3133f0
commit 91af593ff5
31 changed files with 805 additions and 494 deletions
Download patch file Download diff file Expand all files Collapse all files

52
pages/api/users/[id]/password.ts
View file

@ -1,52 +0,0 @@
import { NextApiRequestQueryBody } from 'lib/types';
import { canUpdateUser } from 'lib/auth';
import { useAuth } from 'lib/middleware';
import { NextApiResponse } from 'next';
import {
badRequest,
checkPassword,
hashPassword,
methodNotAllowed,
ok,
unauthorized,
} from 'next-basics';
import { getUser, updateUser, User } from 'queries';
export interface UserPasswordRequestQuery {
id: string;
}
export interface UserPasswordRequestBody {
currentPassword: string;
newPassword: string;
}
export default async (
req: NextApiRequestQueryBody<UserPasswordRequestQuery, UserPasswordRequestBody>,
res: NextApiResponse<User>,
) => {
await useAuth(req, res);
const { currentPassword, newPassword } = req.body;
const { id } = req.query;
if (req.method === 'POST') {
if (!(await canUpdateUser(req.auth, id))) {
return unauthorized(res);
}
const user = await getUser({ id }, { includePassword: true });
if (!checkPassword(currentPassword, user.password)) {
return badRequest(res, 'Current password is incorrect');
}
const password = hashPassword(newPassword);
const updated = await updateUser({ password }, { id });
return ok(res, updated);
}
return methodNotAllowed(res);
};