49 lines
1.5 KiB
JavaScript
49 lines
1.5 KiB
JavaScript
const UserError = require('vn-loopback/util/user-error');
|
|
module.exports = Self => {
|
|
Self.remoteMethodCtx('setPassword', {
|
|
description: 'Set a new password',
|
|
accepts: [
|
|
{
|
|
arg: 'workerFk',
|
|
type: 'number',
|
|
required: true,
|
|
description: 'The worker id',
|
|
},
|
|
{
|
|
arg: 'newPass',
|
|
type: 'String',
|
|
required: true,
|
|
description: 'The new worker password'
|
|
}
|
|
],
|
|
http: {
|
|
path: `/:id/setPassword`,
|
|
verb: 'PATCH'
|
|
}
|
|
});
|
|
Self.setPassword = async(ctx, options) => {
|
|
const models = Self.app.models;
|
|
const myOptions = {};
|
|
const {args} = ctx;
|
|
let tx;
|
|
if (typeof options == 'object')
|
|
Object.assign(myOptions, options);
|
|
if (!myOptions.transaction) {
|
|
tx = await Self.beginTransaction({});
|
|
myOptions.transaction = tx;
|
|
}
|
|
try {
|
|
const isSubordinate = await models.Worker.isSubordinate(ctx, args.workerFk, myOptions);
|
|
if (!isSubordinate) throw new UserError('You don\'t have enough privileges.');
|
|
|
|
await models.VnUser.setPassword(args.workerFk, args.newPass, myOptions);
|
|
await models.VnUser.updateAll({id: args.workerFk}, {emailVerified: true}, myOptions);
|
|
|
|
if (tx) await tx.commit();
|
|
} catch (e) {
|
|
if (tx) await tx.rollback();
|
|
throw e;
|
|
}
|
|
};
|
|
};
|