Addresses a bug that would prevent users from changing their own passwords, introduced as part of #1187. (#1214)

This commit is contained in:
Brian Schrameck
2021-06-28 16:36:14 -04:00
committed by GitHub
parent cb1827ccbf
commit 167fe46288
+5
View File
@@ -180,6 +180,11 @@ func (r *userRepository) Update(entity interface{}, cols ...string) error {
u.IsAdmin = false u.IsAdmin = false
u.UserName = usr.UserName u.UserName = usr.UserName
} }
// Decrypt the user's existing password before validating. This is required otherwise the existing password entered by the user will never match.
if err := r.decryptPassword(usr); err != nil {
return err
}
if err := validatePasswordChange(u, usr); err != nil { if err := validatePasswordChange(u, usr); err != nil {
return err return err
} }