umami/pages/api/accounts/[id]/password.js

40 lines
957 B
JavaScript
Raw Normal View History

import { getAccount, updateAccount } from 'queries';
2020-08-09 11:03:37 +02:00
import { useAuth } from 'lib/middleware';
2022-08-29 05:20:54 +02:00
import {
badRequest,
methodNotAllowed,
ok,
unauthorized,
checkPassword,
hashPassword,
} from 'next-basics';
import { allowQuery } from 'lib/auth';
import { TYPE_ACCOUNT } from 'lib/constants';
2020-08-09 11:03:37 +02:00
export default async (req, res) => {
await useAuth(req, res);
const { current_password, new_password } = req.body;
const { id: accountUuid } = req.query;
2020-08-09 11:03:37 +02:00
if (!(await allowQuery(req, TYPE_ACCOUNT))) {
2020-09-11 22:49:43 +02:00
return unauthorized(res);
}
2020-08-09 11:03:37 +02:00
if (req.method === 'POST') {
const account = await getAccount({ accountUuid });
2020-08-09 11:03:37 +02:00
if (!checkPassword(current_password, account.password)) {
2020-08-09 11:03:37 +02:00
return badRequest(res, 'Current password is incorrect');
}
const password = hashPassword(new_password);
2020-08-09 11:03:37 +02:00
const updated = await updateAccount({ password }, { accountUuid });
2020-08-09 11:03:37 +02:00
return ok(res, updated);
}
return methodNotAllowed(res);
};