Rehash password for admin-user pwd updates (#398)

resolved #397
Mintplex-Labs · Nov 27, 2023 · 55d319b · 55d319b
1 parent 29d3c60
commit 55d319b
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/server/models/user.js b/server/models/user.js
@@ -21,6 +21,14 @@ const User = {
 
   update: async function (userId, updates = {}) {
     try {
+      // Rehash new password if it exists as update
+      // will be given to us as plaintext.
+      if (updates.hasOwnProperty("password") && updates.password.length >= 8) {
+        updates.password = bcrypt.hashSync(updates.password, 10);
+      } else {
+        delete updates.password;
+      }
+
       await prisma.users.update({
         where: { id: parseInt(userId) },
         data: updates,