Rominou/hotel_api
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update passwrod fix

Browse Source
This commit is contained in:
Romain Mallard
2026-01-15 15:30:40 +01:00
parent d031e5cabe
commit a103780a72
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
db/auth_copy_2.sqlite-shm
View File

Binary file not shown.

BIN
db/auth_copy_2.sqlite-wal
View File

Binary file not shown.

8
src/utils/auth.rs
View File

@@ -288,8 +288,8 @@ pub async fn update_password(
}; };
let user_row = match conn.query_row( let user_row = match conn.query_row(
"SELECT password, id FROM users WHERE username = ?1 AND current_password = ?2", "SELECT password, id FROM users WHERE username = ?1",
params![&payload.username, &payload.current_password], params![&payload.username],
|row|{ |row|{
let password: String = row.get(0)?; let password: String = row.get(0)?;
let id: i32 = row.get(1)?; let id: i32 = row.get(1)?;
@@ -297,7 +297,7 @@ pub async fn update_password(
}, },
).optional() { ).optional() {
Ok(opt) => opt, Ok(opt) => opt,
Err(_) => return (StatusCode::INTERNAL_SERVER_ERROR, "DB query error") Err(e) => return (StatusCode::INTERNAL_SERVER_ERROR, format!("DB query error: {}", e ))
.into_response(), .into_response(),
}; };
@@ -307,7 +307,7 @@ pub async fn update_password(
.into_response(), .into_response(),
}; };
if verify_password( &payload.current_password, &password ) { if !verify_password( &payload.current_password, &password ) {
return (StatusCode::UNAUTHORIZED, "Invalid Password").into_response() return (StatusCode::UNAUTHORIZED, "Invalid Password").into_response()
}; };