update passwrod fix
This commit is contained in:
@@ -288,8 +288,8 @@ pub async fn update_password(
|
||||
};
|
||||
|
||||
let user_row = match conn.query_row(
|
||||
"SELECT password, id FROM users WHERE username = ?1 AND current_password = ?2",
|
||||
params![&payload.username, &payload.current_password],
|
||||
"SELECT password, id FROM users WHERE username = ?1",
|
||||
params![&payload.username],
|
||||
|row|{
|
||||
let password: String = row.get(0)?;
|
||||
let id: i32 = row.get(1)?;
|
||||
@@ -297,7 +297,7 @@ pub async fn update_password(
|
||||
},
|
||||
).optional() {
|
||||
Ok(opt) => opt,
|
||||
Err(_) => return (StatusCode::INTERNAL_SERVER_ERROR, "DB query error")
|
||||
Err(e) => return (StatusCode::INTERNAL_SERVER_ERROR, format!("DB query error: {}", e ))
|
||||
.into_response(),
|
||||
};
|
||||
|
||||
@@ -307,7 +307,7 @@ pub async fn update_password(
|
||||
.into_response(),
|
||||
};
|
||||
|
||||
if verify_password( &payload.current_password, &password ) {
|
||||
if !verify_password( &payload.current_password, &password ) {
|
||||
return (StatusCode::UNAUTHORIZED, "Invalid Password").into_response()
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user