evazion 5faa323729 users: clean up password update logic. ...

Pull the password reauthentication logic out of the user model and put
it in the password update controller where it belongs.

This fixes an issue where when a new user was created the user model had
an incorrect password error set on it by `encrypt_password_on_update`.
It was trying to verify the old password even though we don't have one
when creating a new user. This error caused the user create action to
redirect back to the signup page because `respond_with` thought that
creating the user failed.

2020-03-24 17:25:35 -05:00

6.6 KiB

Raw Blame History

View Raw