Skip to content

Commit fb89c6c

Browse files
Merge pull request #110 from ontoportal-lirmm/development
Merge to master: Release 2.5.2 - Fix: explicitly load resetTokenExpireTime in password reset
2 parents 0eae7ed + 709849d commit fb89c6c

1 file changed

Lines changed: 1 addition & 3 deletions

File tree

helpers/users_helper.rb

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,12 +38,10 @@ def token(len)
3838
end
3939

4040
def reset_password(email, username, token)
41-
user = LinkedData::Models::User.where(email: email, username: username).include(User.goo_attrs_to_load(includes_param)).first
41+
user = LinkedData::Models::User.where(email: email, username: username).include(User.goo_attrs_to_load(includes_param) + [:resetToken, :passwordHash, :resetTokenExpireTime]).first
4242

4343
error 404, "User not found" unless user
4444

45-
user.bring(:resetToken)
46-
user.bring(:passwordHash)
4745
user.show_apikey = true
4846
token_accepted = token.eql?(user.resetToken)
4947
if token_accepted

0 commit comments

Comments
 (0)