diff options
| author | MS <ms@taler.net> | 2021-01-26 15:04:03 +0100 |
|---|---|---|
| committer | MS <ms@taler.net> | 2021-01-26 15:04:03 +0100 |
| commit | df649e65dedec5b28e0efb98b9a77fee0a83bde4 (patch) | |
| tree | af4782c0142993896cf8a72505de355f59974986 | |
| parent | 8087940d06ffbdcde81f69213de5f9891be643a1 (diff) | |
| download | libeufin-df649e65dedec5b28e0efb98b9a77fee0a83bde4.tar.gz libeufin-df649e65dedec5b28e0efb98b9a77fee0a83bde4.tar.bz2 libeufin-df649e65dedec5b28e0efb98b9a77fee0a83bde4.zip | |
pick username from auth
| -rw-r--r-- | nexus/src/main/kotlin/tech/libeufin/nexus/server/JSON.kt | 1 | ||||
| -rw-r--r-- | nexus/src/main/kotlin/tech/libeufin/nexus/server/NexusServer.kt | 5 |
2 files changed, 0 insertions, 6 deletions
diff --git a/nexus/src/main/kotlin/tech/libeufin/nexus/server/JSON.kt b/nexus/src/main/kotlin/tech/libeufin/nexus/server/JSON.kt index bee90bb1..0ee5bbeb 100644 --- a/nexus/src/main/kotlin/tech/libeufin/nexus/server/JSON.kt +++ b/nexus/src/main/kotlin/tech/libeufin/nexus/server/JSON.kt @@ -298,7 +298,6 @@ data class CreateUserRequest( ) data class ChangeUserPassword( - val username: String, val newPassword: String ) diff --git a/nexus/src/main/kotlin/tech/libeufin/nexus/server/NexusServer.kt b/nexus/src/main/kotlin/tech/libeufin/nexus/server/NexusServer.kt index 273980d9..a5ca7d06 100644 --- a/nexus/src/main/kotlin/tech/libeufin/nexus/server/NexusServer.kt +++ b/nexus/src/main/kotlin/tech/libeufin/nexus/server/NexusServer.kt @@ -336,13 +336,8 @@ fun serverMain(dbName: String, host: String, port: Int) { // change a user's password post("/users/password") { val body = call.receiveJson<ChangeUserPassword>() - val requestedUsername = requireValidResourceName(body.username) transaction { val user = authenticateRequest(call.request) - if (requestedUsername != user.username) throw NexusError( - HttpStatusCode.Unauthorized, - "Insufficient rights to change password for '${requestedUsername}'" - ) user.passwordHash = CryptoUtil.hashpw(body.newPassword) } call.respond(NexusMessage(message = "Password successfully changed")) |