Merge pull request #70 from ClassConnect-org/dev

maxogod · web-flow · commit fa1a4089dcf4 · 2025-06-08T15:35:56.000-03:00
fix: do not allow to change to empty pw
diff --git a/internal/handlers/users/auth/login.go b/internal/handlers/users/auth/login.go
@@ -240,7 +240,7 @@ func (h *authHandler) RecoverPassword(c *gin.Context) {
 	}
 
 	if token != "" {
-		if recoveryInfo.Password != "" && len(recoveryInfo.Password) < 8 {
+		if len(recoveryInfo.Password) < 8 {
 			_ = c.Error(errors.NewBadRequestError("password must be at least 8 characters long"))
 			return
 		}

Original file line number	Diff line number	Diff line change
`@@ -240,7 +240,7 @@ func (h authHandler) RecoverPassword(c gin.Context) {`
`240`	`240`	`}`
`241`	`241`
`242`	`242`	`if token != "" {`
`243`		`- if recoveryInfo.Password != "" && len(recoveryInfo.Password) < 8 {`
	`243`	`+ if len(recoveryInfo.Password) < 8 {`
`244`	`244`	`_ = c.Error(errors.NewBadRequestError("password must be at least 8 characters long"))`
`245`	`245`	`return`
`246`	`246`	`}`