Audit changes.

This commit is contained in:
jdl
2026-06-13 15:01:50 +02:00
parent 75782c4efd
commit fe5f26ed70
3 changed files with 14 additions and 9 deletions

View File

@@ -2,9 +2,10 @@ package hub
import (
"encoding/json"
"errors"
"log"
"net/http"
"vppn/hub/api"
"vppn/hub/errs"
"vppn/m"
"git.crumpington.com/lib/go/webutil"
@@ -234,21 +235,22 @@ func (a *App) _adminPasswordSubmit(s *api.Session, w http.ResponseWriter, r *htt
}
if len(newPwd) < 8 {
return errors.New("password is too short")
return errs.ErrInvalidPassword
}
if newPwd != newPwd2 {
return errors.New("passwords don't match")
return errs.ErrPasswordMismatch
}
err = bcrypt.CompareHashAndPassword(conf.Password, []byte(curPwd))
if err != nil {
return err
return errs.ErrNotAuthorized
}
hash, err := bcrypt.GenerateFromPassword([]byte(newPwd), bcrypt.DefaultCost)
if err != nil {
return err
log.Printf("Failed to hash password with bcrypt: %v", err)
return errs.ErrUnexpected
}
conf.Password = hash