sqlpad/routes/password-reset.js

Web app. Write SQL and visualize the results. Supports Postgres, MySQL, SQL Server, Crate, Vertica and SAP HANA.

const router = require('express').Router();
const User = require('../models/User.js');
const sendError = require('../lib/sendError');

// This route used to set new password given a passwordResetId
router.post('/api/password-reset/:passwordResetId', async function(req, res) {
  try {
    const user = await User.findOneByPasswordResetId(
      req.params.passwordResetId
    );

    if (!user) {
      return sendError(res, null, 'Password reset permissions not found');
    }
    if (req.body.email !== user.email) {
      return sendError(res, null, 'Incorrect email address');
    }
    if (req.body.password !== req.body.passwordConfirmation) {
      return sendError(res, null, 'Passwords do not match');
    }
    user.password = req.body.password;
    user.passwordResetId = '';
    await user.save();
    return res.json({});
  } catch (error) {
    sendError(res, error, 'Problem querying user database');
  }
});

module.exports = router;