CodeMirror/budibase
1
0
Fork 0
mirror of synced 2024-06-28 11:00:55 +12:00
Code Issues Projects Releases Wiki Activity

Add pre-hased password option to admin creation

Browse source
This commit is contained in:
Rory Powell 2021-09-09 17:08:27 +01:00
parent 2a62eb82be
commit d919c44185
1 changed files with 12 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
packages/worker/src/api/controllers/global/users.js
View file

@ -33,7 +33,7 @@ async function allUsers() {
return response.rows.map(row => row.doc)
}
async function saveUser(user, tenantId) {
async function saveUser(user, tenantId, hashPassword = true) {
if (!tenantId) {
throw "No tenancy specified."
}
@ -56,7 +56,7 @@ async function saveUser(user, tenantId) {
// get the password, make sure one is defined
let hashedPassword
if (password) {
hashedPassword = await hash(password)
hashedPassword = hashPassword ? await hash(password) : password
} else if (dbUser) {
hashedPassword = dbUser.password
} else {
@ -110,6 +110,15 @@ exports.save = async ctx => {
exports.adminUser = async ctx => {
const { email, password, tenantId } = ctx.request.body
// account portal sends a pre-hashed password - honour param to prevent double hashing
let hashPassword = ctx.request.query.hashPassword
if (hashPassword && hashPassword == "false") {
hashPassword = false
} else {
hashPassword = true
}
if (await doesTenantExist(tenantId)) {
ctx.throw(403, "Organisation already exists.")
}
@ -141,7 +150,7 @@ exports.adminUser = async ctx => {
tenantId,
}
try {
ctx.body = await saveUser(user, tenantId)
ctx.body = await saveUser(user, tenantId, hashPassword)
} catch (err) {
ctx.throw(err.status || 400, err)
}