search

feathersjs-ecosystem / feathers-authentication-management

Adds sign up verification, forgotten password reset, and other capabilities to local feathers-authentication
https://feathers-a-m.netlify.app/
MIT License
246 stars 98 forks source link

Update verify-signup-set-password.js #167

Closed GautierT closed 3 years ago

GautierT commented 3 years ago

Commented this line to fix a security issue where password is set even if token don't match.

await eraseVerifyPropsSetPassword(user1, user1.isVerified, {}, password, field);

Related to : https://github.com/feathersjs-ecosystem/feathers-authentication-management/pull/142#issuecomment-867766756