add error message when account doesn't have password

2025-07-28 11:35:04 +05:30
parent 0e1d0cd649
commit 9d8c89f4e9
1 changed files with 3 additions and 0 deletions
--- a/src/auth/auth.route.ts
+++ b/src/auth/auth.route.ts
@@ -76,6 +76,9 @@ export async function authRoutes(fastify: FastifyInstance) {
        if (!userInDB)
          return res.code(401).send({ error: "invalid email or password" });

+        if (!userInDB.passwordHash)
+          return res.code(401).send({ error: "invalid email or password" });
+
        const match = await verify(userInDB.passwordHash, password);
        if (!match)
          return res.code(401).send({ error: "invalid email or password" });