awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #3631 from Infisical/daniel/password-resets-fix

Browse Source 
fix(password-resets): allow password resets when users don't have a password set
This commit is contained in:
Daniel Hougaard
2025-05-20 18:14:07 +04:00
committed by GitHub
parent 293bea474e 677180548b
commit 8d8a3efd77
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
backend/src/services/auth/auth-password-service.ts
View File

@@ -189,16 +189,15 @@ export const authPaswordServiceFactory = ({
throw new BadRequestError({ message: `User encryption key not found for user with ID '${userId}'` }); throw new BadRequestError({ message: `User encryption key not found for user with ID '${userId}'` });
} }
if (!user.hashedPassword) {
throw new BadRequestError({ message: "Unable to reset password, no password is set" });
}
if (!user.authMethods?.includes(AuthMethod.EMAIL)) { if (!user.authMethods?.includes(AuthMethod.EMAIL)) {
throw new BadRequestError({ message: "Unable to reset password, no email authentication method is configured" }); throw new BadRequestError({ message: "Unable to reset password, no email authentication method is configured" });
} }
// we check the old password if the user is resetting their password while logged in // we check the old password if the user is resetting their password while logged in
if (type === ResetPasswordV2Type.LoggedInReset) { if (type === ResetPasswordV2Type.LoggedInReset) {
if (!user.hashedPassword) {
throw new BadRequestError({ message: "Unable to change password, no password is set" });
}
if (!oldPassword) { if (!oldPassword) {
throw new BadRequestError({ message: "Current password is required." }); throw new BadRequestError({ message: "Current password is required." });
} }