Method changePassword

server/controllers/UserController.js:487–518

({ token, hash, password })

  }

  async changePassword({ token, hash, password }) {
    // decrypt the hash to get the user information
    let user;
    try {
      user = JSON.parse(decrypt(hash));
    } catch (e) {
      return new Promise((resolve, reject) => reject(e));
    }

    // check if the existing token is valid first
    return this.findById(user.id)
      .then(async (existingUser) => {
        if (existingUser.passwordResetToken !== token) {
          return new Promise((resolve, reject) => reject(new Error(401)));
        }

        const bcryptHash = await bcrypt.hash(password, 10);

        const userUpdate = {
          passwordResetToken: uuid(),
          password: bcryptHash,
        };

        return this.update(user.id, userUpdate);
      })
      .then(() => {
        return new Promise((resolve) => resolve({ completed: true }));
      })
      .catch((error) => {
        return new Promise((resolve, reject) => reject(error));
      });
  }

  areThereAnyUsers() {
    return db.User.findAll({ limit: 1 })