opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-09-24 15:04:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

chore: do not allow resetting password of non password users (#9003)

Browse Source
This commit is contained in:
Steven Masley
2023-08-09 13:56:13 -05:00
committed by GitHub
parent 919f5c6fe9
commit f334b66178
3 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
coderd/users.go
+7
View File
@@ -733,6 +733,13 @@ func (api *API) putUserPassword(rw http.ResponseWriter, r *http.Request) {
return
}
if user.LoginType != database.LoginTypePassword {
httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{
Message: "Users without password login type cannot change their password.",
})
return
}
err := userpassword.Validate(params.Password)
if err != nil {
httpapi.Write(ctx, rw, http.StatusBadRequest, codersdk.Response{