mirror of
https://github.com/strapi/strapi.git
synced 2025-08-26 01:35:56 +00:00
🚑 Forgot/Reset password fix for MongoDB - only update mandatory fields (#6327)
* 🚑 Reset password only update mandatory fields Signed-off-by: Damien Tsenkoff <d.tsenkoff@gmail.com> * 🔥 Remove unused / unnecessary code Signed-off-by: Damien Tsenkoff <d.tsenkoff@gmail.com>
This commit is contained in:
parent
ffecbd42d1
commit
1f9d6af6c9
@ -198,15 +198,14 @@ module.exports = {
|
||||
);
|
||||
}
|
||||
|
||||
// Delete the current code
|
||||
user.resetPasswordToken = null;
|
||||
|
||||
user.password = await strapi.plugins['users-permissions'].services.user.hashPassword({
|
||||
const password = await strapi.plugins['users-permissions'].services.user.hashPassword({
|
||||
password: params.password,
|
||||
});
|
||||
|
||||
// Update the user.
|
||||
await strapi.query('user', 'users-permissions').update({ id: user.id }, user);
|
||||
await strapi
|
||||
.query('user', 'users-permissions')
|
||||
.update({ id: user.id }, { resetPasswordToken: null, password });
|
||||
|
||||
ctx.send({
|
||||
jwt: strapi.plugins['users-permissions'].services.jwt.issue({
|
||||
@ -304,9 +303,6 @@ module.exports = {
|
||||
// Generate random token.
|
||||
const resetPasswordToken = crypto.randomBytes(64).toString('hex');
|
||||
|
||||
// Set the property code.
|
||||
user.resetPasswordToken = resetPasswordToken;
|
||||
|
||||
const settings = await pluginStore.get({ key: 'email' }).then(storeEmail => {
|
||||
try {
|
||||
return storeEmail['reset_password'].options;
|
||||
@ -363,7 +359,7 @@ module.exports = {
|
||||
}
|
||||
|
||||
// Update the user.
|
||||
await strapi.query('user', 'users-permissions').update({ id: user.id }, user);
|
||||
await strapi.query('user', 'users-permissions').update({ id: user.id }, { resetPasswordToken });
|
||||
|
||||
ctx.send({ ok: true });
|
||||
},
|
||||
|
Loading…
x
Reference in New Issue
Block a user