Revert "fix(security): Prevent email enumeration" (#351)

This commit is contained in:
Eric Dubé
2024-04-26 18:22:14 -04:00
committed by GitHub
parent a3ec7bb5ad
commit 2ee00ca8e6
@@ -114,7 +114,10 @@ router.post('/send-pass-recovery-email', express.json(), body_parser_error_handl
});
// Send response
return res.send({message: `If the email address exists in our database. A recovery email will be sent to <strong>${user.email}</strong>`});
if(req.body.username)
return res.send({message: `Password recovery sent to the email associated with <strong>${user.username}</strong>. Please check your email for instructions on how to reset your password.`});
else
return res.send({message: `Password recovery email sent to <strong>${user.email}</strong>. Please check your email for instructions on how to reset your password.`});
}catch(e){
console.log(e)
@@ -123,4 +126,4 @@ router.post('/send-pass-recovery-email', express.json(), body_parser_error_handl
})
module.exports = router
module.exports = router