jyapayne/langflow
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

🔒 chore(users.py): refactor reset_password function to improve password verification logic

Browse source
This commit is contained in:
Gabriel Luiz Freitas Almeida 2023-09-08 16:44:25 -03:00
commit ea11b16f58
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/backend/langflow/api/v1/users.py
View file

@ -18,6 +18,7 @@ from langflow.services.auth.utils import (
get_current_active_superuser, get_current_active_superuser,
get_current_active_user, get_current_active_user,
get_password_hash, get_password_hash,
verify_password,
) )
from langflow.services.database.models.user.crud import ( from langflow.services.database.models.user.crud import (
get_user_by_id, get_user_by_id,
@ -125,11 +126,11 @@ def reset_password(
if not user: if not user:
raise HTTPException(status_code=404, detail="User not found") raise HTTPException(status_code=404, detail="User not found")
new_password = get_password_hash(user_update.password) if verify_password(user_update.password, user.password):
if new_password == user.password:
raise HTTPException( raise HTTPException(
status_code=400, detail="You can't use your current password" status_code=400, detail="You can't use your current password"
) )
new_password = get_password_hash(user_update.password)
user.password = new_password user.password = new_password
session.commit() session.commit()
session.refresh(user) session.refresh(user)