1
0
mirror of https://github.com/kremalicious/umami.git synced 2024-12-22 17:23:54 +01:00
umami/pages/api/account/password.js

29 lines
816 B
JavaScript
Raw Normal View History

2020-08-12 07:24:41 +02:00
import { getAccountById, updateAccount } from 'lib/queries';
2020-08-09 11:03:37 +02:00
import { useAuth } from 'lib/middleware';
import { badRequest, methodNotAllowed, ok } from 'lib/response';
import { checkPassword, hashPassword } from 'lib/crypto';
export default async (req, res) => {
await useAuth(req, res);
const { user_id } = req.auth;
const { current_password, new_password } = req.body;
if (req.method === 'POST') {
2020-08-12 07:24:41 +02:00
const account = await getAccountById(user_id);
2020-08-09 11:03:37 +02:00
const valid = await checkPassword(current_password, account.password);
if (!valid) {
return badRequest(res, 'Current password is incorrect');
}
const password = await hashPassword(new_password);
const updated = await updateAccount(user_id, { password });
return ok(res, updated);
}
return methodNotAllowed(res);
};