Fix: Remove password reset token after successful reset (#248)
Signed-off-by: Knut Ahlers <knut@ahlers.me> Signed-off-by: Knut Ahlers <knut@ahlers.me>pull/249/head
parent
1109537675
commit
d5cd829834
|
|
@ -289,7 +289,7 @@ router.post('/password_reset_requests/:confirm_token/confirm', function(req, res
|
|||
bcrypt.genSalt(10, (err, salt) => {
|
||||
bcrypt.hash(password, salt, function(err, hash) {
|
||||
user.password_hash = hash;
|
||||
user.password_token = null;
|
||||
user.password_reset_token = null;
|
||||
user.save().then(function(updatedUser) {
|
||||
res.sendStatus(201);
|
||||
});
|
||||
|
|
|
|||
Loading…
Reference in New Issue