snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)

server/auth/handlers/handle_change-password.go

@@ -0,0 +1,54 @@
+package handlers
+
+import (
+	"github.com/cortezaproject/corteza/server/auth/request"
+	"github.com/cortezaproject/corteza/server/pkg/auth"
+	"github.com/cortezaproject/corteza/server/system/service"
+	"go.uber.org/zap"
+)
+
+func (h *AuthHandlers) changePasswordForm(req *request.AuthReq) error {
+	h.Log.Debug("showing password change form")
+	req.Template = TmplChangePassword
+	req.Data["form"] = req.PopKV()
+	return nil
+}
+
+func (h *AuthHandlers) changePasswordProc(req *request.AuthReq) (err error) {
+	err = h.AuthService.ChangePassword(
+		auth.SetIdentityToContext(req.Context(), req.AuthUser.User),
+		req.AuthUser.User.ID,
+		req.Request.PostFormValue("oldPassword"),
+		req.Request.PostFormValue("newPassword"),
+	)
+
+	t := translator(req, "auth")
+
+	if err == nil {
+		req.NewAlerts = append(req.NewAlerts, request.Alert{
+			Type: "primary",
+			Text: t("change-password.alerts.password-change-success"),
+		})
+
+		req.RedirectTo = GetLinks().Profile
+		return nil
+	}
+
+	switch {
+	case service.AuthErrInternalLoginDisabledByConfig().Is(err),
+		service.AuthErrPasswordNotSecure().Is(err),
+		service.AuthErrPasswordChangeFailedForUnknownUser().Is(err),
+		service.AuthErrPasswordResetFailedOldPasswordCheckFailed().Is(err):
+		req.SetKV(map[string]string{
+			"error": err.Error(),
+		})
+		req.RedirectTo = GetLinks().ChangePassword
+
+		h.Log.Warn("handled error", zap.Error(err))
+		return nil
+
+	default:
+		h.Log.Error("unhandled error", zap.Error(err))
+		return err
+	}
+}