Password reset does not need an email
This commit is contained in:
@@ -379,18 +379,14 @@ function get(userId, callback) {
|
||||
});
|
||||
}
|
||||
|
||||
function getByResetToken(email, resetToken, callback) {
|
||||
assert.strictEqual(typeof email, 'string');
|
||||
function getByResetToken(resetToken, callback) {
|
||||
assert.strictEqual(typeof resetToken, 'string');
|
||||
assert.strictEqual(typeof callback, 'function');
|
||||
|
||||
var error = validateEmail(email);
|
||||
if (error) return callback(error);
|
||||
|
||||
error = validateToken(resetToken);
|
||||
if (error) return callback(error);
|
||||
|
||||
userdb.getByResetToken(email, resetToken, function (error, result) {
|
||||
userdb.getByResetToken(resetToken, function (error, result) {
|
||||
if (error) return callback(error);
|
||||
|
||||
callback(null, result);
|
||||
|
||||
Reference in New Issue
Block a user