import $ from 'cafy'; import * as bcrypt from 'bcryptjs'; import User from '../../../../models/user'; import define from '../../define'; export const meta = { requireCredential: true, secure: true, params: { currentPassword: { validator: $.str }, newPassword: { validator: $.str } } }; export default define(meta, (ps, user) => new Promise(async (res, rej) => { // Compare password const same = await bcrypt.compare(ps.currentPassword, user.password); if (!same) { return rej('incorrect password'); } // Generate hash of password const salt = await bcrypt.genSalt(8); const hash = await bcrypt.hash(ps.newPassword, salt); await User.update(user._id, { $set: { 'password': hash } }); res(); }));