senaduka/old-svijetlastrana
1
0
Fork 0
Code Issues Pull Requests 5 Actions Packages Projects Releases Wiki Activity

base 64 decode password

Browse Source
This commit is contained in:
GotPPay
2018-06-01 19:29:17 +02:00
parent 2fc6619383
commit 3494273503
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
server/router/passwordresetroute/controller.go
View File

@@ -118,6 +118,12 @@ func (c *controller) handleResetComplete(ctx echo.Context) error {
return routeutils.ResponseAPIPasswordResetFailed(ctx, "No password")
}
pass, err := b64.StdEncoding.DecodeString(user.Pass)
if err != nil {
return routeutils.ResponseAPIPasswordResetFailed(ctx, "Invalid password", false)
}
user.Pass = string(pass)
passwordResetEntry, err := c.svc.PasswordReset.GetByToken(userToken)
if err != nil || len(passwordResetEntry.Token) < 1 || passwordResetEntry.Expires.Before(time.Now()) || passwordResetEntry.Used == true {
return routeutils.ResponseAPIPasswordResetFailed(ctx, "Token error")