Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2026-03-21 11:52:01 +01:00
Code Issues Packages Projects Releases Wiki Activity

feat: added PUT /api/v1/users/:uid/password route

Browse Source
This commit is contained in:
Julian Lam
2020-03-31 19:26:03 -04:00
parent af2e424ffe
commit 7aed174ebc
5 changed files with 73 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/controllers/write/users.js
View File

@@ -106,3 +106,16 @@ async function processDeletion(uid, req, res) {
email: userData.email,
});
}
Users.changePassword = async (req, res) => {
req.body.uid = req.params.uid;
await user.changePassword(req.user.uid, Object.assign(req.body, { ip: req.ip }));
await events.log({
type: 'password-change',
uid: req.user.uid,
targetUid: req.params.uid,
ip: req.ip,
});
helpers.formatApiResponse(200, res);
};

35
src/routes/write/users.js
View File

@@ -23,42 +23,11 @@ function authenticatedRoutes() {
setupApiRoute(router, '/', middleware, [...middlewares, middleware.checkRequired.bind(null, ['username']), middleware.isAdmin], 'post', controllers.write.users.create);
setupApiRoute(router, '/', middleware, [...middlewares, middleware.checkRequired.bind(null, ['uids']), middleware.isAdmin, middleware.exposePrivileges], 'delete', controllers.write.users.deleteMany);
setupApiRoute(router, '/:uid', middleware, [...middlewares], 'put', controllers.write.users.update);
setupApiRoute(router, '/:uid', middleware, [...middlewares, middleware.exposePrivileges], 'delete', controllers.write.users.delete);
// app.route('/:uid')
// .delete(apiMiddleware.requireUser, apiMiddleware.exposeAdmin, function(req, res) {
// if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10) && !res.locals.isAdmin) {
// return errorHandler.respond(401, res);
// }
// // Clear out any user tokens belonging to the to-be-deleted user
// async.waterfall([
// async.apply(auth.getTokens, req.params.uid),
// function(tokens, next) {
// async.each(tokens, function(token, next) {
// auth.revokeToken(token, 'user', next);
// }, next);
// },
// async.apply(Users.delete, req.user.uid, req.params.uid)
// ], function(err) {
// return errorHandler.handle(err, res);
// });
// });
// app.put('/:uid/password', apiMiddleware.requireUser, apiMiddleware.exposeAdmin, function(req, res) {
// if (parseInt(req.params.uid, 10) !== parseInt(req.user.uid, 10) && !res.locals.isAdmin) {
// return errorHandler.respond(401, res);
// }
// Users.changePassword(req.user.uid, {
// uid: req.params.uid,
// currentPassword: req.body.current || '',
// newPassword: req.body['new'] || ''
// }, function(err) {
// errorHandler.handle(err, res);
// });
// });
setupApiRoute(router, '/:uid/password', middleware, [...middlewares, middleware.checkRequired.bind(null, ['newPassword'])], 'put', controllers.write.users.changePassword);
// app.put('/:uid/follow', apiMiddleware.requireUser, function(req, res) {
// Users.follow(req.user.uid, req.params.uid, function(err) {

2
src/socket.io/user/profile.js
View File

@@ -78,6 +78,8 @@ module.exports = function (SocketUser) {
}
SocketUser.changePassword = async function (socket, data) {
sockets.warnDeprecated(socket, 'PUT /api/v1/users/:uid/password');
if (!socket.uid) {
throw new Error('[[error:invalid-uid]]');
}