Audit changes.
This commit is contained in:
@@ -2,9 +2,10 @@ package hub
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"log"
|
||||
"net/http"
|
||||
"vppn/hub/api"
|
||||
"vppn/hub/errs"
|
||||
"vppn/m"
|
||||
|
||||
"git.crumpington.com/lib/go/webutil"
|
||||
@@ -234,21 +235,22 @@ func (a *App) _adminPasswordSubmit(s *api.Session, w http.ResponseWriter, r *htt
|
||||
}
|
||||
|
||||
if len(newPwd) < 8 {
|
||||
return errors.New("password is too short")
|
||||
return errs.ErrInvalidPassword
|
||||
}
|
||||
|
||||
if newPwd != newPwd2 {
|
||||
return errors.New("passwords don't match")
|
||||
return errs.ErrPasswordMismatch
|
||||
}
|
||||
|
||||
err = bcrypt.CompareHashAndPassword(conf.Password, []byte(curPwd))
|
||||
if err != nil {
|
||||
return err
|
||||
return errs.ErrNotAuthorized
|
||||
}
|
||||
|
||||
hash, err := bcrypt.GenerateFromPassword([]byte(newPwd), bcrypt.DefaultCost)
|
||||
if err != nil {
|
||||
return err
|
||||
log.Printf("Failed to hash password with bcrypt: %v", err)
|
||||
return errs.ErrUnexpected
|
||||
}
|
||||
|
||||
conf.Password = hash
|
||||
|
||||
Reference in New Issue
Block a user