fix: user enumaration on forgot password page

2024-02-18 21:46:50 +01:00
parent 6058dca273
commit 64515d77cf
23 changed files with 3323 additions and 1685 deletions
--- a/backend/src/auth/auth.controller.ts
+++ b/backend/src/auth/auth.controller.ts
@@ -96,9 +96,9 @@ export class AuthController {

  @Post("resetPassword/:email")
  @Throttle(5, 5 * 60)
-  @HttpCode(204)
+  @HttpCode(202)
  async requestResetPassword(@Param("email") email: string) {
-    return await this.authService.requestResetPassword(email);
+    this.authService.requestResetPassword(email);
  }

  @Post("resetPassword")