hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

TwitterAPI: Make change_password require body params instead of query

Browse source 
Backport of: https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3503
This commit is contained in:
Haelwenn (lanodan) Monnier 2021-08-10 19:42:03 +02:00
commit 3961422f85
No known key found for this signature in database
GPG key ID: D5B7A8E43C997DEE
4 changed files with 61 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

12
lib/pleroma/web/twitter_api/controllers/util_controller.ex
View file

@ -81,17 +81,13 @@ defmodule Pleroma.Web.TwitterAPI.UtilController do
end
end
def change_password(%{assigns: %{user: user}} = conn, %{
password: password,
new_password: new_password,
new_password_confirmation: new_password_confirmation
}) do
case CommonAPI.Utils.confirm_current_password(user, password) do
def change_password(%{assigns: %{user: user}, body_params: body_params} = conn, %{}) do
case CommonAPI.Utils.confirm_current_password(user, body_params.password) do
{:ok, user} ->
with {:ok, _user} <-
User.reset_password(user, %{
password: new_password,
password_confirmation: new_password_confirmation
password: body_params.new_password,
password_confirmation: body_params.new_password_confirmation
}) do
json(conn, %{status: "success"})
else