Function changePassword

services/cloudUser.js:90–135

(appId, userId, oldPassword, newPassword, accessList, isMasterKey, encryption_key)

  },

  changePassword(appId, userId, oldPassword, newPassword, accessList, isMasterKey, encryption_key) {
    const deferred = q.defer();

    try {
      customService.findOne(appId, Collections.User, {
        _id: userId,
      }, null, null, null, accessList, isMasterKey).then((user) => {
        if (!user) {
          deferred.reject('Invalid User');
          return;
        }
        let encryptedPassword;
        if (encryption_key && encryption_key.iv && encryption_key.key) {
          encryptedPassword = encryptText(cipher_alg, encryption_key.key, encryption_key.iv, oldPassword);
        } else {
          encryptedPassword = crypto.pbkdf2Sync(oldPassword, config.secureKey, 10000, 64, 'sha1').toString('base64');
        }
        if (encryptedPassword === user.password) { // authenticate user.
          if (encryption_key && encryption_key.iv && encryption_key.key) {
            user.password = encryptText(cipher_alg, encryption_key.key, encryption_key.iv, newPassword);
          } else {
            user.password = crypto.pbkdf2Sync(newPassword, config.secureKey, 10000, 64, 'sha1').toString('base64');
          }
          mongoService.document.save(appId, [{
            document: user,
          }]).then(() => {
            deferred.resolve(user); // returns no. of items matched
          }, (error) => {
            deferred.reject(error);
          });
        } else {
          deferred.reject('Invalid Old Password');
        }
      }, (error) => {
        deferred.reject(error);
      });
    } catch (err) {
      winston.log('error', {
        error: String(err),
        stack: new Error().stack,
      });
      deferred.reject(err);
    }

    return deferred.promise;
  },

  /* Desc   : Reset Password
	  Params : appId, email, accessList, masterKey