fix: errors thrown if no password sent in to profile edit route

4 years ago · 7757f965eb
parent 549ca11056
commit 7757f965eb
1 changed files with 1 additions and 1 deletions
--- a/src/controllers/write/users.js
+++ b/src/controllers/write/users.js
@ -29,7 +29,7 @@ Users.update = async (req, res) => {
 	const [isAdminOrGlobalMod, canEdit, passwordMatch] = await Promise.all([
 		user.isAdminOrGlobalMod(req.user.uid),
 		privileges.users.canEdit(req.user.uid, req.params.uid),
-		user.isPasswordCorrect(req.body.uid, req.body.password, req.ip),
+		req.body.password ? user.isPasswordCorrect(req.body.uid, req.body.password, req.ip) : false,
 	]);

 	// Changing own email/username requires password confirmation