aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorAdam Soltys <[email protected]>2025-02-06 09:07:12 -0800
committerAdam Soltys <[email protected]>2025-02-06 09:07:12 -0800
commite76db4629ece6f66e14c07a12bb1ecd495acb178 (patch)
tree6e0ef008f99b294bdd7f5b05ba6c4dcc8ff2aa0b
parent084b62733b99bc3caaf4ac177e678929faf3151f (diff)
downloadcoinos-server-e76db4629ece6f66e14c07a12bb1ecd495acb178.tar.gz
coinos-server-e76db4629ece6f66e14c07a12bb1ecd495acb178.zip
expire reset codes
-rw-r--r--routes/users.ts9
1 files changed, 2 insertions, 7 deletions
diff --git a/routes/users.ts b/routes/users.ts
index f088d011..16c2d407 100644
--- a/routes/users.ts
+++ b/routes/users.ts
@@ -541,12 +541,7 @@ export default {
try {
user.pin = null;
-
- if (user.nsec) {
- const sk = randomBytes(32);
- user.pubkey = getPublicKey(sk);
- user.nsec = nip49encrypt(sk, password);
- }
+ user.nsec = null;
user.password = await Bun.password.hash(password, {
algorithm: "bcrypt",
@@ -651,7 +646,7 @@ export default {
if (user) {
const code = v4();
const link = `${process.env.URL}/reset/${code}`;
- await s(`reset:${code}`, uid);
+ await db.set(`reset:${code}`, uid, { EX: 300 });
await mail(user, "Password reset", templates.passwordReset, {
...user,