Addresses a bug that would prevent users from changing their own passwords, introduced as part of #1187. (#1214)

This commit is contained in:
Brian Schrameck 2021-06-28 16:36:14 -04:00 committed by GitHub
parent cb1827ccbf
commit 167fe46288
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 0 deletions

View File

@ -180,6 +180,11 @@ func (r *userRepository) Update(entity interface{}, cols ...string) error {
u.IsAdmin = false
u.UserName = usr.UserName
}
// Decrypt the user's existing password before validating. This is required otherwise the existing password entered by the user will never match.
if err := r.decryptPassword(usr); err != nil {
return err
}
if err := validatePasswordChange(u, usr); err != nil {
return err
}