@devmoods/express-extras 0.15.0 → 0.15.2

package/dist/auth.js

@@ -39,7 +39,7 @@ export function createAuth({ getUserByToken, methods: { emailAndPassword }, filt
                     return [201, { token }];
                 }
                 catch (error) {
-                    getLogger('core').error(error);
+                    logger.error(error);
                     throw Unauthorized(error.message);
                 }
             }));
@@ -66,23 +66,23 @@ export function createAuth({ getUserByToken, methods: { emailAndPassword }, filt
         router.post('/reset/:token', validateParams(tokenSchema), validateBody({
             type: 'object',
             properties: {
-                email: emailSchema,
-                password: { type: 'string' },
+                password: { type: 'string', minLength: 8 },
             },
-            required: ['email', 'password'],
+            required: ['password'],
         }), route(async (req) => {
-            const { email, password } = req.body;
+            const { password } = req.body;
             const { token } = req.params;
             if (!emailAndPassword) {
                 throw new Error('Not applicable for login method');
             }
-            const user = await emailAndPassword(email, skipPasswordCheck);
-            const tokenEmail = await redis.get(token);
-            if (!tokenEmail || email !== tokenEmail) {
-                throw BadRequest('invalid email');
+            const email = await redis.get(token);
+            if (!email) {
+                throw BadRequest('invalid reset token');
             }
+            const user = await emailAndPassword(email, skipPasswordCheck);
             await onPasswordChanged?.(user, await hashPassword(password));
-            logger.info('user changed password', { email: tokenEmail });
+            await redis.del(token);
+            logger.info('user changed password', { email });
             return 200;
         }));
         router.get('/reset/:token', validateParams(tokenSchema), route(async (req) => {
@@ -156,7 +156,7 @@ export function createAuth({ getUserByToken, methods: { emailAndPassword }, filt
                 next();
             }
             catch (error) {
-                getLogger('core').error(error);
+                logger.error(error);
                 next(Unauthorized('Invalid token'));
                 return;
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devmoods/express-extras",
-  "version": "0.15.0",
+  "version": "0.15.2",
   "description": "Kubernetes-ready utilities for rapid Node.js application development",
   "type": "module",
   "main": "./dist/index.js",