Function resetUserPassword

services/cloudUser.js:179–223

(appId, username, newPassword, resetKey, accessList, isMasterKey, encryption_key)

  },

  resetUserPassword(appId, username, newPassword, resetKey, accessList, isMasterKey, encryption_key) {
    const deferred = q.defer();

    try {
      customService.findOne(appId, Collections.User, {
        username,
      }, null, null, null, accessList, true).then((user) => {
        if (!user) {
          deferred.reject(`User with username ${username} not found.`);
          return;
        }
        // Send an email to reset user password here.
        const passwordResetKey = crypto.createHmac('sha256', config.secureKey)
          .update(user.password)
          .digest('hex');

        if (passwordResetKey === resetKey) {
          if (encryption_key && encryption_key.iv && encryption_key.key) {
            user.password = encryptText(cipher_alg, encryption_key.key, encryption_key.iv, newPassword);
          } else {
            user.password = crypto.pbkdf2Sync(newPassword, config.secureKey, 10000, 64, 'sha1').toString('base64');
          }
          mongoService.document.save(appId, [{
            document: user,
          }])
            .then(() => {
              deferred.resolve(); // returns no. of items matched
            }, (error) => {
              deferred.reject(error);
            });
        } else {
          deferred.reject('Reset Key is invalid.');
        }
      }, (error) => {
        deferred.reject(error);
      });
    } catch (err) {
      winston.log('error', {
        error: String(err),
        stack: new Error().stack,
      });
      deferred.reject(err);
    }
    return deferred.promise;
  },

  signup(appId, document, accessList, isMasterKey, encryption_key) {
    const deferred = q.defer();