IBCornelsen/online-energieausweis
1
0
Fork 0
Code Issues 272 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Passwort Zurücksetzen

Browse Source
This commit is contained in:
Moritz Utcke
2025-04-07 18:12:51 -04:00
parent 1d27e2bd67
commit babd929f6a
2 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/pages/api/auth/passwort-vergessen.ts
View File

@@ -31,7 +31,7 @@ export const GET = defineApiRoute({
const resetToken = encodeToken({ const resetToken = encodeToken({
exp: Date.now() + 15 * 60 * 1000, exp: Date.now() + 15 * 60 * 1000,
typ: TokenType.Reset, typ: TokenType.Reset,
uid: user.uid id: user.id
}) })
const info = await transport.sendMail({ const info = await transport.sendMail({
@@ -70,7 +70,7 @@ export const POST = defineApiRoute({
async fetch(input, context, transfer) { async fetch(input, context, transfer) {
const decoded = decodeToken(input.token); const decoded = decodeToken(input.token);
if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.uid) { if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset || !decoded.id) {
throw new APIError({ throw new APIError({
code: "BAD_REQUEST", code: "BAD_REQUEST",
message: "Der von ihnen benutzte Token ist nicht mehr gültig." message: "Der von ihnen benutzte Token ist nicht mehr gültig."
@@ -79,7 +79,7 @@ export const POST = defineApiRoute({
const user = await prisma.benutzer.findUnique({ const user = await prisma.benutzer.findUnique({
where: { where: {
uid: decoded.uid id: decoded.id
} }
}) })
@@ -94,7 +94,7 @@ export const POST = defineApiRoute({
await prisma.benutzer.update({ await prisma.benutzer.update({
where: { where: {
uid: decoded.uid id: decoded.id
}, },
data: { data: {
passwort: hashed passwort: hashed

3
src/pages/auth/passwort-zuruecksetzen.astro
View File

@@ -19,9 +19,6 @@ if (!token) {
const decoded = decodeToken(token) const decoded = decodeToken(token)
console.log(decoded.exp, Date.now());
if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset) { if (!decoded.exp || decoded.exp < Date.now() || decoded.typ !== TokenType.Reset) {
return Astro.redirect("/") return Astro.redirect("/")
} }