From 8e7ebf2057d6d2d6090fb3f5240a9b1e6486e4ef Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Sun, 21 Mar 2021 21:59:17 -0700
Subject: disable password confirm

---
 lib/register.js | 2 +-
 routes/users.js | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/lib/register.js b/lib/register.js
index a8d420ba..fa8145b0 100644
--- a/lib/register.js
+++ b/lib/register.js
@@ -8,7 +8,7 @@ register = ah(async (user, ip, requireChallenge) => {
   let exists = await db.User.count({ where: { username: user.username } });
   if (exists) throw new Error(`Username ${user.username} taken`);
 
-  if (user.password && user.password === user.confirm) {
+  if (user.password) {
     user.password = await bcrypt.hash(user.password, 1);
   }
 
diff --git a/routes/users.js b/routes/users.js
index d0232eb4..e2ee569d 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -146,7 +146,6 @@ app.post(
         twofa,
         pin,
         password,
-        confirm,
         tokens,
         seed
       } = req.body;
@@ -179,7 +178,7 @@ app.post(
       user.seed = seed;
       user.fiat = fiat;
 
-      if (password && password === confirm) {
+      if (password) {
         user.password = await bcrypt.hash(password, 1);
       }
 
-- 
cgit v1.2.3