Remove old lc user key on rename, login check for pw reset

Rhizome-Conifer · Jan 20, 2022 · 96d77bf · 96d77bf
1 parent 27d44f3
commit 96d77bf
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/webrecorder/webrecorder/models/usermanager.py b/webrecorder/webrecorder/models/usermanager.py
@@ -862,6 +862,9 @@ def modify_user(self):
             self.redis.srem('s:users', username)
             self.redis.sadd('s:users', new_username)
 
+            # remove old lowercase mapping
+            self.redis.hdel('h:lc_useres', username.lower())
+
             # lowercase username mapping
             lc = new_username.lower()
             self.redis.hset('h:lc_users', lc,

diff --git a/webrecorder/webrecorder/usercontroller.py b/webrecorder/webrecorder/usercontroller.py
@@ -235,7 +235,7 @@ def reset_password():
 
         @self.app.post('/api/v1/auth/password/update')
         def update_password():
-            self.get_user_or_raise()
+            self.access.assert_is_logged_in()
 
             data = request.json or {}