multi-hotel-refactor #3
Binary file not shown.
Binary file not shown.
@@ -288,8 +288,8 @@ pub async fn update_password(
|
|||||||
};
|
};
|
||||||
|
|
||||||
let user_row = match conn.query_row(
|
let user_row = match conn.query_row(
|
||||||
"SELECT password, id FROM users WHERE username = ?1 AND current_password = ?2",
|
"SELECT password, id FROM users WHERE username = ?1",
|
||||||
params![&payload.username, &payload.current_password],
|
params![&payload.username],
|
||||||
|row|{
|
|row|{
|
||||||
let password: String = row.get(0)?;
|
let password: String = row.get(0)?;
|
||||||
let id: i32 = row.get(1)?;
|
let id: i32 = row.get(1)?;
|
||||||
@@ -297,7 +297,7 @@ pub async fn update_password(
|
|||||||
},
|
},
|
||||||
).optional() {
|
).optional() {
|
||||||
Ok(opt) => opt,
|
Ok(opt) => opt,
|
||||||
Err(_) => return (StatusCode::INTERNAL_SERVER_ERROR, "DB query error")
|
Err(e) => return (StatusCode::INTERNAL_SERVER_ERROR, format!("DB query error: {}", e ))
|
||||||
.into_response(),
|
.into_response(),
|
||||||
};
|
};
|
||||||
|
|
||||||
@@ -307,7 +307,7 @@ pub async fn update_password(
|
|||||||
.into_response(),
|
.into_response(),
|
||||||
};
|
};
|
||||||
|
|
||||||
if verify_password( &payload.current_password, &password ) {
|
if !verify_password( &payload.current_password, &password ) {
|
||||||
return (StatusCode::UNAUTHORIZED, "Invalid Password").into_response()
|
return (StatusCode::UNAUTHORIZED, "Invalid Password").into_response()
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user