espid2sensor: Version/Datum fehlten auf Login-Seite bei falschem Passwort

POST /login rendert bei Fehlermeldung wieder version/vdate/noUsers, so wie
GET /login das schon tut - vorher fielen diese Locals beim Fehlerfall weg
und der Footer war leer.
This commit is contained in:
2026-08-07 08:20:19 +00:00
parent ddc503cb63
commit 0c45cd9f46
+6 -2
View File
@@ -21,10 +21,14 @@ export function registerAuthRoutes(app) {
app.post('/login', async (req, res) => { app.post('/login', async (req, res) => {
const { email, password } = req.body; const { email, password } = req.body;
const version = pkg.version
const vdate = pkg.date
const noUsers = (await usersCollection.countDocuments()) === 0;
const renderError = () => res.render('login', { error: errText, version, vdate, noUsers });
const user = await usersCollection.findOne({ email: email.toLowerCase() }); const user = await usersCollection.findOne({ email: email.toLowerCase() });
if (!user) return res.render('login', { error: errText }); if (!user) return renderError();
const match = await bcrypt.compare(password, user.passwordHash); const match = await bcrypt.compare(password, user.passwordHash);
if (!match) return res.render('login', { error: errText }); if (!match) return renderError();
req.session.userId = user._id; req.session.userId = user._id;
req.session.isAdmin = user.role === 'admin'; req.session.isAdmin = user.role === 'admin';
res.redirect('/'); res.redirect('/');