import $ from 'cafy'; import * as bcrypt from 'bcryptjs'; import User, { ILocalUser } from '../../../../models/user'; import { publishMainStream } from '../../../../stream'; import generateUserToken from '../../common/generate-native-user-token'; export const meta = { requireCredential: true, secure: true }; export default async (params: any, user: ILocalUser) => new Promise(async (res, rej) => { // Get 'password' parameter const [password, passwordErr] = $.str.get(params.password); if (passwordErr) return rej('invalid password param'); // Compare password const same = await bcrypt.compare(password, user.password); if (!same) { return rej('incorrect password'); } // Generate secret const secret = generateUserToken(); await User.update(user._id, { $set: { 'token': secret } }); res(); // Publish event publishMainStream(user._id, 'myTokenRegenerated'); });