adapt-authoring-auth-local 1.0.1 → 1.0.2

package/.github/workflows/new.yml

@@ -1,19 +1,15 @@
-name: Add to main project
+# Calls the org-level reusable workflow to add PRs to the TODO Board
+
+name: Add PR to Project
 
 on:
-  issues:
-    types:
-      - opened
   pull_request:
     types:
       - opened
+      - reopened
 
 jobs:
   add-to-project:
-    name: Add to main project
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/add-to-project@v0.1.0
-        with:
-          project-url: https://github.com/orgs/adapt-security/projects/5
-          github-token: ${{ secrets.PROJECTS_SECRET }}
+    uses: adapt-security/.github/.github/workflows/new.yml@main
+    secrets:
+      PROJECTS_SECRET: ${{ secrets.PROJECTS_SECRET }}

package/lib/LocalAuthModule.js

@@ -184,8 +184,8 @@ class LocalAuthModule extends AbstractAuthModule {
     const text = this.app.lang.translate(undefined, 'app.updateusertext')
     const html = this.app.lang.translate(undefined, 'app.updateuserhtml')
     try {
-      if(mailer.isEnabled) await mailer.send({ to: user.email, subject, text, html })
-    } catch(e) {
+      if (mailer.isEnabled) await mailer.send({ to: user.email, subject, text, html })
+    } catch (e) {
       this.log('error', e)
     }
 
@@ -284,13 +284,13 @@ class LocalAuthModule extends AbstractAuthModule {
   async changePasswordHandler (req, res, next) {
     let email
     try {
-      if (req.auth.token) { // already authenticated, so can use auth data
+      if (req.auth.token && req.body.noAuth !== 'true') { // already authenticated, so can use auth data
         if (req.auth.token.type !== this.type) throw new Error()
         // allow for a specific email to be passed via body, falling back to the email from the auth data
         email = req.body.email || req.auth.user.email
         // validate the existing password for security
-        const [user] = await this.users.find({ email });
-        await PasswordUtils.compare(req.body.oldPassword, user.password);
+        const [user] = await this.users.find({ email })
+        await PasswordUtils.compare(req.body.oldPassword, user.password)
       } else { // no authenticated, so should expect body data
         const tokenData = await PasswordUtils.validateReset(req.body.token)
         email = tokenData.email

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "adapt-authoring-auth-local",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Module which implements username/password (local) authentication",
   "homepage": "https://github.com/adapt-security/adapt-authoring-auth-local",
   "license": "GPL-3.0",
@@ -8,7 +8,7 @@
   "main": "index.js",
   "repository": "github:adapt-security/adapt-authoring-auth-local",
   "dependencies": {
-    "bcryptjs": "3.0.2",
+    "bcryptjs": "3.0.3",
     "date-fns": "^4.1.0",
     "lodash": "^4.17.21"
   },

package/.github/workflows/labelled_prs.yml

@@ -1,16 +0,0 @@
-name: Add labelled PRs to project
-
-on:
-  pull_request:
-    types: [ labeled ]
-
-jobs:
-  add-to-project:
-    if: ${{ github.event.label.name == 'dependencies' }}
-    name: Add to main project
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/add-to-project@v0.1.0
-        with:
-          project-url: https://github.com/orgs/adapt-security/projects/5
-          github-token: ${{ secrets.PROJECTS_SECRET }}