treamz/wa-dev-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Admin: password confirmation field + validation

Browse Source 
- Added password_confirm field in user edit/new forms
- Validation: passwords must match, min 6 chars
- New user: password required
- Edit user: password optional (leave empty to keep)
This commit is contained in:
treamz 2026-03-21 23:56:42 +03:00
parent cb412f5b1d
commit 4008155abd
1 changed files with 21 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
lib/admin.js
View File

@ -101,7 +101,7 @@ async function setupAdmin(app) {
options: {
navigation: { name: 'Пользователи', icon: 'User' },
listProperties: ['id', 'email', 'display_name', 'role', 'is_blocked', 'last_login'],
editProperties: ['email', 'display_name', 'role', 'is_blocked', 'password'],
editProperties: ['email', 'display_name', 'role', 'is_blocked', 'password', 'password_confirm'],
showProperties: ['id', 'email', 'display_name', 'role', 'is_blocked', 'created_at', 'last_login'],
properties: {
password_hash: { isVisible: false },
@ -110,26 +110,40 @@ async function setupAdmin(app) {
isVisible: { list: false, show: false, edit: true, filter: false },
description: 'Оставьте пустым чтобы не менять',
},
password_confirm: {
type: 'password',
isVisible: { list: false, show: false, edit: true, filter: false },
description: 'Повторите пароль',
},
role: { availableValues: [{ value: 'user', label: 'User' }, { value: 'admin', label: 'Admin' }] },
},
actions: {
edit: {
before: async (request) => {
if (request.payload && request.payload.password && request.payload.password.trim()) {
const pw = request.payload?.password?.trim();
const pw2 = request.payload?.password_confirm?.trim();
if (pw) {
if (pw !== pw2) throw new Error('Пароли не совпадают');
if (pw.length < 6) throw new Error('Пароль минимум 6 символов');
const bcrypt = require('bcrypt');
request.payload.password_hash = await bcrypt.hash(request.payload.password, 10);
request.payload.password_hash = await bcrypt.hash(pw, 10);
}
delete request.payload.password;
delete request.payload.password_confirm;
return request;
},
},
new: {
before: async (request) => {
if (request.payload && request.payload.password && request.payload.password.trim()) {
const bcrypt = require('bcrypt');
request.payload.password_hash = await bcrypt.hash(request.payload.password, 10);
}
const pw = request.payload?.password?.trim();
const pw2 = request.payload?.password_confirm?.trim();
if (!pw) throw new Error('Пароль обязателен');
if (pw !== pw2) throw new Error('Пароли не совпадают');
if (pw.length < 6) throw new Error('Пароль минимум 6 символов');
const bcrypt = require('bcrypt');
request.payload.password_hash = await bcrypt.hash(pw, 10);
delete request.payload.password;
delete request.payload.password_confirm;
return request;
},
},