67 lines
1.7 KiB
TypeScript
67 lines
1.7 KiB
TypeScript
import { IdentityProvider } from "@prisma/client";
|
|
import type { NextApiRequest, NextApiResponse } from "next";
|
|
|
|
import prisma from "@calcom/prisma";
|
|
|
|
import { getSession } from "@lib/auth";
|
|
|
|
import { ErrorCode, hashPassword, verifyPassword } from "../../../lib/auth";
|
|
|
|
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
|
|
const session = await getSession({ req: req });
|
|
|
|
if (!session || !session.user || !session.user.email) {
|
|
res.status(401).json({ message: "Not authenticated" });
|
|
return;
|
|
}
|
|
|
|
const user = await prisma.user.findFirst({
|
|
where: {
|
|
email: session.user.email,
|
|
},
|
|
select: {
|
|
id: true,
|
|
password: true,
|
|
identityProvider: true,
|
|
},
|
|
});
|
|
|
|
if (!user) {
|
|
res.status(404).json({ message: "User not found" });
|
|
return;
|
|
}
|
|
|
|
if (user.identityProvider !== IdentityProvider.CAL) {
|
|
return res.status(400).json({ error: ErrorCode.ThirdPartyIdentityProviderEnabled });
|
|
}
|
|
|
|
const oldPassword = req.body.oldPassword;
|
|
const newPassword = req.body.newPassword;
|
|
|
|
const currentPassword = user.password;
|
|
if (!currentPassword) {
|
|
return res.status(400).json({ error: ErrorCode.UserMissingPassword });
|
|
}
|
|
|
|
const passwordsMatch = await verifyPassword(oldPassword, currentPassword);
|
|
if (!passwordsMatch) {
|
|
return res.status(403).json({ error: ErrorCode.IncorrectPassword });
|
|
}
|
|
|
|
if (oldPassword === newPassword) {
|
|
return res.status(400).json({ error: ErrorCode.NewPasswordMatchesOld });
|
|
}
|
|
|
|
const hashedPassword = await hashPassword(newPassword);
|
|
await prisma.user.update({
|
|
where: {
|
|
id: user.id,
|
|
},
|
|
data: {
|
|
password: hashedPassword,
|
|
},
|
|
});
|
|
|
|
res.status(200).json({ message: "Password updated successfully" });
|
|
}
|