70 lines
2 KiB
Go
70 lines
2 KiB
Go
package v1
|
|
|
|
import (
|
|
"code.vikunja.io/api/models"
|
|
"github.com/labstack/echo"
|
|
"net/http"
|
|
)
|
|
|
|
// UserPassword holds a user password. Used to update it.
|
|
type UserPassword struct {
|
|
OldPassword string `json:"old_password"`
|
|
NewPassword string `json:"new_password"`
|
|
}
|
|
|
|
// UserChangePassword is the handler to change a users password
|
|
func UserChangePassword(c echo.Context) error {
|
|
// swagger:operation POST /user/password user updatePassword
|
|
// ---
|
|
// summary: Shows the current user
|
|
// consumes:
|
|
// - application/json
|
|
// produces:
|
|
// - application/json
|
|
// parameters:
|
|
// - name: body
|
|
// in: body
|
|
// schema:
|
|
// "$ref": "#/definitions/Password"
|
|
// responses:
|
|
// "200":
|
|
// "$ref": "#/responses/Message"
|
|
// "400":
|
|
// "$ref": "#/responses/Message"
|
|
// "404":
|
|
// "$ref": "#/responses/Message"
|
|
// "500":
|
|
// "$ref": "#/responses/Message"
|
|
|
|
// Check if the user is itself
|
|
doer, err := models.GetCurrentUser(c)
|
|
if err != nil {
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "Error getting current user.")
|
|
}
|
|
|
|
// Check for Request Content
|
|
var newPW UserPassword
|
|
if err := c.Bind(&newPW); err != nil {
|
|
return echo.NewHTTPError(http.StatusBadRequest, "No password provided.")
|
|
}
|
|
|
|
// Check the current password
|
|
if _, err = models.CheckUserCredentials(&models.UserLogin{Username: doer.Username, Password: newPW.OldPassword}); err != nil {
|
|
if models.IsErrUserDoesNotExist(err) {
|
|
return echo.NewHTTPError(http.StatusNotFound, "The user does not exist.")
|
|
}
|
|
return c.JSON(http.StatusUnauthorized, models.Message{"Wrong password."})
|
|
}
|
|
|
|
// Update the password
|
|
if err = models.UpdateUserPassword(&doer, newPW.NewPassword); err != nil {
|
|
if models.IsErrUserDoesNotExist(err) {
|
|
return echo.NewHTTPError(http.StatusNotFound, "The user does not exist.")
|
|
}
|
|
|
|
models.Log.Error("Error updating a users password, user: %d, err: %s", doer.ID, err)
|
|
return echo.NewHTTPError(http.StatusInternalServerError, "An error occurred.")
|
|
}
|
|
|
|
return c.JSON(http.StatusOK, models.Message{"The password was updated successfully."})
|
|
}
|