From c5b765c5cc12d4e21135a613b3c04a72cabe9b85 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Tue, 3 Oct 2023 23:38:22 -0700
Subject: check new pin length

---
 routes/users.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'routes')

diff --git a/routes/users.js b/routes/users.js
index 0c4e8484..158a61b1 100644
--- a/routes/users.js
+++ b/routes/users.js
@@ -186,7 +186,7 @@ export default {
       let { confirm, password, pin, newpin, username, shopifyToken, shopifyStore } = body;
 
       if (user.pin && !(pin === user.pin)) throw new Error("Pin required");
-      if (typeof newpin !== "undefined") user.pin = newpin;
+      if (typeof newpin !== "undefined" && newpin.length === 6) user.pin = newpin;
       if (!user.pin || user.pin === "undefined") delete user.pin;
 
       let exists;
@@ -238,6 +238,7 @@ export default {
         `user:${user.username.toLowerCase().replace(/\s/g, "")}`,
         user.id
       );
+      
       await s(`user:${user.id}`, user);
 
       emit(user.id, "user", user);
-- 
cgit v1.2.3