Press n or j to go to the next uncovered block, b, p or k for the previous block.
| 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 | 6x 3x 3x 3x 3x 3x 2x 1x 1x 1x 1x | import { TRPCError } from "@trpc/server";
import { z } from "zod";
import {
passwordSchema,
resetPasswordTokenSchema,
} from "~app/utils/validation";
import { generatePasswordData } from "~utils/server/crypto";
import { unauthProcedure } from "~web/handlers/trpc";
export const procedure = unauthProcedure
.meta({
title: "Reset password",
description:
"Sets a new password for the account matching a valid, unexpired reset password token.",
})
.input(
z.strictObject({
token: resetPasswordTokenSchema,
password: passwordSchema,
}),
)
.mutation(async ({ input, ctx }) => {
const { database } = ctx;
const resetPasswordIntention = await database
.selectFrom("resetPasswordIntentions")
.where((eb) =>
eb("token", "=", input.token).and(
"resetPasswordIntentions.expiresTimestamp",
">",
Temporal.Now.zonedDateTimeISO(),
),
)
.innerJoin("users", (qb) =>
qb.onRef("users.id", "=", "resetPasswordIntentions.userId"),
)
.select(["users.id as userId"])
.limit(1)
.executeTakeFirst();
if (!resetPasswordIntention) {
throw new TRPCError({
code: "NOT_FOUND",
message: `Reset password intention "${input.token}" does not exist or expired.`,
});
}
const passwordData = await generatePasswordData(ctx, input.password);
await database.transaction().execute(async (tx) => {
await tx
.updateTable("users")
.set({
passwordHash: passwordData.hash,
passwordSalt: passwordData.salt,
})
.where("users.id", "=", resetPasswordIntention.userId)
.executeTakeFirst();
await tx
.deleteFrom("resetPasswordIntentions")
.where(
"resetPasswordIntentions.userId",
"=",
resetPasswordIntention.userId,
)
.execute();
});
});
|