adding a guarantee to update user with same ID

1 files changed, 3 insertions, 6 deletions

diff --git a/system/admin/handlers.go b/system/admin/handlers.go
index 0a6218c..aec3380 100644
--- a/system/admin/handlers.go
+++ b/system/admin/handlers.go
@@ -686,6 +686,7 @@ func recoveryKeyHandler(res http.ResponseWriter, req *http.Request) {
 		}
 
 		// set user with new password
+		password := req.FormValue("password")
 		usr := &user.User{}
 		u, err := db.User(email)
 		if err != nil {
@@ -713,12 +714,8 @@ func recoveryKeyHandler(res http.ResponseWriter, req *http.Request) {
 			return
 		}
 
-		update := &user.User{
-			ID:    usr.ID,
-			Email: usr.Email,
-			Hash:  usr.Hash,
-			Salt:  usr.Salt,
-		}
+		update := user.NewUser(email, password)
+		update.ID = usr.ID
 
 		err = db.UpdateUser(usr, update)
 		if err != nil {