From babd929f6a566f7c1c0171faea08765024867016 Mon Sep 17 00:00:00 2001 From: Moritz Utcke Date: Mon, 7 Apr 2025 18:12:51 -0400 Subject: [PATCH] =?UTF-8?q?Passwort=20Zur=C3=BCcksetzen?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/pages/api/auth/passwort-vergessen.ts | 8 ++++---- src/pages/auth/passwort-zuruecksetzen.astro | 3 --- 2 files changed, 4 insertions(+), 7 deletions(-) diff --git a/src/pages/api/auth/passwort-vergessen.ts b/src/pages/api/auth/passwort-vergessen.ts index a0017190..cc672f2f 100644 --- a/src/pages/api/auth/passwort-vergessen.ts +++ b/src/pages/api/auth/passwort-vergessen.ts @@ -31,7 +31,7 @@ export const GET = defineApiRoute({ const resetToken = encodeToken({ exp: Date.now() + 15 * 60 * 1000, typ: TokenType.Reset, - uid: user.uid + id: user.id }) const info = await transport.sendMail({ @@ -70,7 +70,7 @@ export const POST = defineApiRoute({ async fetch(input, context, transfer) { const decoded = decodeToken(input.token); - if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.uid) { + if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.id) { throw new APIError({ code: "BAD_REQUEST", message: "Der von ihnen benutzte Token ist nicht mehr gültig." @@ -79,7 +79,7 @@ export const POST = defineApiRoute({ const user = await prisma.benutzer.findUnique({ where: { - uid: decoded.uid + id: decoded.id } }) @@ -94,7 +94,7 @@ export const POST = defineApiRoute({ await prisma.benutzer.update({ where: { - uid: decoded.uid + id: decoded.id }, data: { passwort: hashed diff --git a/src/pages/auth/passwort-zuruecksetzen.astro b/src/pages/auth/passwort-zuruecksetzen.astro index 11b2e8c5..af8a2675 100644 --- a/src/pages/auth/passwort-zuruecksetzen.astro +++ b/src/pages/auth/passwort-zuruecksetzen.astro @@ -19,9 +19,6 @@ if (!token) { const decoded = decodeToken(token) -console.log(decoded.exp, Date.now()); - - if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset) { return Astro.redirect("/") }