espid2sensor: Version/Datum fehlten auf Login-Seite bei falschem Passwort
POST /login rendert bei Fehlermeldung wieder version/vdate/noUsers, so wie GET /login das schon tut - vorher fielen diese Locals beim Fehlerfall weg und der Footer war leer.
This commit is contained in:
@@ -21,10 +21,14 @@ export function registerAuthRoutes(app) {
|
|||||||
|
|
||||||
app.post('/login', async (req, res) => {
|
app.post('/login', async (req, res) => {
|
||||||
const { email, password } = req.body;
|
const { email, password } = req.body;
|
||||||
|
const version = pkg.version
|
||||||
|
const vdate = pkg.date
|
||||||
|
const noUsers = (await usersCollection.countDocuments()) === 0;
|
||||||
|
const renderError = () => res.render('login', { error: errText, version, vdate, noUsers });
|
||||||
const user = await usersCollection.findOne({ email: email.toLowerCase() });
|
const user = await usersCollection.findOne({ email: email.toLowerCase() });
|
||||||
if (!user) return res.render('login', { error: errText });
|
if (!user) return renderError();
|
||||||
const match = await bcrypt.compare(password, user.passwordHash);
|
const match = await bcrypt.compare(password, user.passwordHash);
|
||||||
if (!match) return res.render('login', { error: errText });
|
if (!match) return renderError();
|
||||||
req.session.userId = user._id;
|
req.session.userId = user._id;
|
||||||
req.session.isAdmin = user.role === 'admin';
|
req.session.isAdmin = user.role === 'admin';
|
||||||
res.redirect('/');
|
res.redirect('/');
|
||||||
|
|||||||
Reference in New Issue
Block a user