From d4c0f7267a11ee26af145f1dd7c2d10e87342312 Mon Sep 17 00:00:00 2001
From: Marco Beretta <81851188+berry-13@users.noreply.github.com>
Date: Mon, 19 Aug 2024 23:55:33 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=94=91=20fix(AuthService):=20properly=20h?=
 =?UTF-8?q?andle=20reading=20and=20deletion=20of=20password=20reset=20toke?=
 =?UTF-8?q?n=20(#3697)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 api/server/services/AuthService.js | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/api/server/services/AuthService.js b/api/server/services/AuthService.js
index 0fe7b84fa0..326b0ed420 100644
--- a/api/server/services/AuthService.js
+++ b/api/server/services/AuthService.js
@@ -280,9 +280,8 @@ const requestPasswordReset = async (req) => {
  * @returns
  */
 const resetPassword = async (userId, token, password) => {
-  let passwordResetToken = await createToken({
+  let passwordResetToken = await findToken({
     userId,
-    expiresIn: 900,
   });
 
   if (!passwordResetToken) {
@@ -311,7 +310,7 @@ const resetPassword = async (userId, token, password) => {
     });
   }
 
-  await passwordResetToken.deleteOne();
+  await deleteTokens({ token: passwordResetToken.token });
   logger.info(`[resetPassword] Password reset successful. [Email: ${user.email}]`);
   return { message: 'Password reset was successful' };
 };