ironmagma/quintodrome
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Addresses a bug that would prevent users from changing their own passwords, introduced as part of #1187. (#1214)

Browse source
This commit is contained in:
Brian Schrameck 2021-06-28 16:36:14 -04:00 committed by GitHub
parent cb1827ccbf
commit 167fe46288
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
persistence/user_repository.go
View file

@ -180,6 +180,11 @@ func (r *userRepository) Update(entity interface{}, cols ...string) error {
u.IsAdmin = false u.IsAdmin = false
u.UserName = usr.UserName u.UserName = usr.UserName
} }
// Decrypt the user's existing password before validating. This is required otherwise the existing password entered by the user will never match.
if err := r.decryptPassword(usr); err != nil {
return err
}
if err := validatePasswordChange(u, usr); err != nil { if err := validatePasswordChange(u, usr); err != nil {
return err return err
} }