Passwort Zurücksetzen
This commit is contained in:
@@ -31,7 +31,7 @@ export const GET = defineApiRoute({
|
||||
const resetToken = encodeToken({
|
||||
exp: Date.now() + 15 * 60 * 1000,
|
||||
typ: TokenType.Reset,
|
||||
uid: user.uid
|
||||
id: user.id
|
||||
})
|
||||
|
||||
const info = await transport.sendMail({
|
||||
@@ -70,7 +70,7 @@ export const POST = defineApiRoute({
|
||||
async fetch(input, context, transfer) {
|
||||
const decoded = decodeToken(input.token);
|
||||
|
||||
if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.uid) {
|
||||
if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.id) {
|
||||
throw new APIError({
|
||||
code: "BAD_REQUEST",
|
||||
message: "Der von ihnen benutzte Token ist nicht mehr gültig."
|
||||
@@ -79,7 +79,7 @@ export const POST = defineApiRoute({
|
||||
|
||||
const user = await prisma.benutzer.findUnique({
|
||||
where: {
|
||||
uid: decoded.uid
|
||||
id: decoded.id
|
||||
}
|
||||
})
|
||||
|
||||
@@ -94,7 +94,7 @@ export const POST = defineApiRoute({
|
||||
|
||||
await prisma.benutzer.update({
|
||||
where: {
|
||||
uid: decoded.uid
|
||||
id: decoded.id
|
||||
},
|
||||
data: {
|
||||
passwort: hashed
|
||||
|
||||
@@ -19,9 +19,6 @@ if (!token) {
|
||||
|
||||
const decoded = decodeToken(token)
|
||||
|
||||
console.log(decoded.exp, Date.now());
|
||||
|
||||
|
||||
if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset) {
|
||||
return Astro.redirect("/")
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user