Send email when a password is changed

danij · danij · commit 1d8cf215d9cf · 2018-09-23T21:01:50.000+03:00
diff --git a/change_password_notification.html b/change_password_notification.html
@@ -0,0 +1,10 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <title>Forum Password Change Notification</title>
+</head>
+<body>
+    <p>The password for your forum account has just been changed.</p>
+</body>
+</html>
diff --git a/routes/custom_account.js b/routes/custom_account.js
@@ -66,6 +66,7 @@ function randomPassword() {
 
 const emailRegisterTemplate = fs.readFileSync(__dirname + '/../register_confirmation_template.html', 'utf8');
 const emailForgotPasswordTemplate = fs.readFileSync(__dirname + '/../reset_password_confirmation_template.html', 'utf8');
+const emailPasswordChangeTemplate = fs.readFileSync(__dirname + '/../change_password_notification.html', 'utf8');
 
 function emailRegistrationConfirmation(email, confirmationId) {
 
@@ -81,6 +82,12 @@ function emailResetPasswordLink(email, resetId) {
     emailService.sendEmail(email, constants.resetPasswordConfirmationTitle, messageBody, messageBody);
 }
 
+function emailPasswordChangeNotificationLink(email) {
+
+    const messageBody = emailPasswordChangeTemplate;
+    emailService.sendEmail(email, constants.passwordChangeNotificationTitle, messageBody, messageBody);
+}
+
 async function registerUserAndGetConfirmationId(email, password, minAge) {
 
     const transformedPassword = await passwordService.transformPasswordInitial(password);
@@ -352,6 +359,8 @@ if (constants.enableCustomAuth) {
 
             if (await changePassword(input.email, input.oldPassword, input.newPassword)) {
 
+                emailPasswordChangeNotificationLink(input.email);
+
                 res.sendJson({
                     status: constants.statusCodes.ok
                 });
diff --git a/services/constants.js b/services/constants.js
@@ -26,6 +26,7 @@ module.exports = {
     registrationConfirmationUrl: process.env.REGISTER_CONFIRMATION_URL,
     registrationConfirmationRedirectUrl: process.env.REGISTER_CONFIRMATION_REDIRECT_URL,
     registrationConfirmationTitle: process.env.REGISTER_CONFIRMATION_TITLE,
+    passwordChangeNotificationTitle: process.env.PASSWORD_CHANGE_NOTIFICATION_TITLE,
     resetPasswordConfirmationTitle: process.env.RESET_PASSWORD_CONFIRMATION_TITLE,
     resetPasswordConfirmationUrl: process.env.RESET_PASSWORD_CONFIRMATION_URL,
     resetPasswordConfirmationTimeoutSeconds: parseInt(process.env.RESET_PASSWORD_TIMEOUT_SECONDS),
