Rewrite admin. (#1713)

* Rewrite admin.

* Clean up password forms.

* Fix naming issues.

* CSS Naming.
This commit is contained in:
Brian Cao 2022-12-26 16:57:59 -08:00 committed by GitHub
parent f4db04c3c6
commit e1f99a7d01
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
113 changed files with 2054 additions and 1872 deletions

View file

@ -30,15 +30,15 @@ export default async (
const { current_password, new_password } = req.body;
const { id } = req.query;
const {
user: { id: userId },
user: { id: userId, isAdmin },
} = req.auth;
if (req.method === 'POST') {
if (canUpdateUser(userId, id)) {
if (!isAdmin && !(await canUpdateUser(userId, id))) {
return unauthorized(res);
}
const user = await getUser({ id });
const user = await getUser({ id }, { includePassword: true });
if (!checkPassword(current_password, user.password)) {
return badRequest(res, 'Current password is incorrect');