Show error page for invalid reset tokens

This commit is contained in:
Johannes Zellner
2016-04-04 14:06:04 +02:00
parent 3be5511e33
commit ff3562b0e8
2 changed files with 4 additions and 3 deletions
+3 -3
View File
@@ -280,10 +280,10 @@ function renderAccountSetupSite(res, req, userObject, error) {
// -> GET /api/v1/session/account/setup.html
function accountSetupSite(req, res) {
if (!req.query.reset_token) return renderAccountSetupSite(res, req, {}, 'Missing Reset Token');
if (!req.query.reset_token) return sendError(res, req, 'Missing Reset Token');
user.getByResetToken(req.query.reset_token, function (error, userObject) {
if (error) return renderAccountSetupSite(res, req, {}, 'Invalid Reset Token');
if (error) return sendError(res, req, 'Invalid Reset Token');
renderAccountSetupSite(res, req, userObject, '');
});
@@ -301,7 +301,7 @@ function accountSetup(req, res, next) {
debug('acountSetup: with token %s.', req.body.resetToken);
user.getByResetToken(req.body.resetToken, function (error, userObject) {
if (error) return renderAccountSetupSite(res, req, {}, 'Invalid Reset Token');
if (error) return sendError(res, req, 'Invalid Reset Token');
userObject.username = req.body.username;
userObject.displayName = req.body.displayName;