fix: password reset token (#4743)

2026-02-14 21:27:20 +00:00 · 2023-10-27 04:52:29 -05:00
parent ef8024c657
commit 588f63505d
2 changed files with 10 additions and 6 deletions
--- a/packages/backend/server/src/modules/auth/service.ts
+++ b/packages/backend/server/src/modules/auth/service.ts
@@ -233,10 +233,13 @@ export class AuthService {
    return Boolean(user.password);
  }

-  async changePassword(id: string, newPassword: string): Promise<User> {
+  async changePassword(email: string, newPassword: string): Promise<User> {
    const user = await this.prisma.user.findUnique({
      where: {
-        id,
+        email,
+        emailVerified: {
+          not: null,
+        },
      },
    });

@@ -248,7 +251,7 @@ export class AuthService {

    return this.prisma.user.update({
      where: {
-        id,
+        id: user.id,
      },
      data: {
        password: hashedPassword,