From 1f1a150f9c4469fe1e2950f4be3237881a1577b5 Mon Sep 17 00:00:00 2001
From: matt <matt@fiddaman.net>
Date: Mon, 14 Feb 2022 10:33:50 +0000
Subject: [PATCH] Added route for POST change password

---
 routes/main.js | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)

diff --git a/routes/main.js b/routes/main.js
index 6ab7b1d..dc8413f 100644
--- a/routes/main.js
+++ b/routes/main.js
@@ -180,6 +180,42 @@ router.get('/password-reset/:uuid/:token', async (req, res) => {
 	});
 });
 
+router.post('/change-password', async (req, res) => {
+	let fields;
+	try {
+		fields = validator.validate(req.body,
+			[
+				'password',
+				'confPassword',
+				'uuid',
+				'token'
+			],
+			{
+				password: [ 'password', 'confPassword' ]
+			}
+		).fields;
+	} catch (e) {
+		console.error(e);
+		return res.redirect('/password-reset');
+	}
+
+	let pr;
+	try {
+		pr = await new PasswordReset(
+			fields.get('uuid'),
+			fields.get('token')
+		);
+	} catch(e) {
+		console.error(e);
+		return res.redirect('/password-reset');
+	}
+
+	const u = await pr.user;
+	await u.changePassword(fields.get('password'));
+
+	return res.redirect('/login');
+});
+
 module.exports = {
 	root: '/',
 	router: router