61 lines
1.7 KiB
TypeScript
61 lines
1.7 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
import prisma from "../../../lib/prisma";
|
|
import dayjs from "dayjs";
|
|
import { User, ResetPasswordRequest } from "@prisma/client";
|
|
import timezone from "dayjs/plugin/timezone";
|
|
import utc from "dayjs/plugin/utc";
|
|
dayjs.extend(utc);
|
|
dayjs.extend(timezone);
|
|
import { hashPassword } from "../../../lib/auth";
|
|
|
|
export default async function handler(req: NextApiRequest, res: NextApiResponse) {
|
|
if (req.method !== "POST") {
|
|
return res.status(400).json({ message: "" });
|
|
}
|
|
|
|
try {
|
|
const rawPassword = req.body?.password;
|
|
const rawRequestId = req.body?.requestId;
|
|
|
|
if (!rawPassword || !rawRequestId) {
|
|
return res.status(400).json({ message: "Couldn't find an account for this email" });
|
|
}
|
|
|
|
const maybeRequest: ResetPasswordRequest = await prisma.resetPasswordRequest.findUnique({
|
|
where: {
|
|
id: rawRequestId,
|
|
},
|
|
});
|
|
|
|
if (!maybeRequest) {
|
|
return res.status(400).json({ message: "Couldn't find an account for this email" });
|
|
}
|
|
|
|
const maybeUser: User = await prisma.user.findUnique({
|
|
where: {
|
|
email: maybeRequest.email,
|
|
},
|
|
});
|
|
|
|
if (!maybeUser) {
|
|
return res.status(400).json({ message: "Couldn't find an account for this email" });
|
|
}
|
|
|
|
const hashedPassword = await hashPassword(rawPassword);
|
|
|
|
await prisma.user.update({
|
|
where: {
|
|
id: maybeUser.id,
|
|
},
|
|
data: {
|
|
password: hashedPassword,
|
|
},
|
|
});
|
|
|
|
return res.status(201).json({ message: "Password reset." });
|
|
} catch (reason) {
|
|
console.error(reason);
|
|
return res.status(500).json({ message: "Unable to create password reset request" });
|
|
}
|
|
}
|