Add app passwords feature

2020-01-31 15:28:42 -08:00
parent e3878fa381
commit 3427db3983
17 changed files with 459 additions and 58 deletions
--- a/src/routes/users.js
+++ b/src/routes/users.js
@@ -112,7 +112,7 @@ function verifyPassword(req, res, next) {

    if (typeof req.body.password !== 'string') return next(new HttpError(400, 'API call requires user password'));

-    users.verifyWithUsername(req.user.username, req.body.password, function (error) {
+    users.verifyWithUsername(req.user.username, req.body.password, users.AP_WEBADMIN, function (error) {
        if (error) return next(BoxError.toHttpError(error));

        req.body.password = '<redacted>'; // this will prevent logs from displaying plain text password