update

controller/userController.js

@@ -178,14 +178,29 @@ async function changePassword(req, res, next) {
     try {
         let user = req.user;
         let newPassword = req.body.newPassword;
+        let oldPassword = req.body.oldPassword;
+        let dbUser = await userModule.findOne({_id: user._id});
+        if(!(dbUser && dbUser._id)) {
+            return res.sendError(errorMessage.loginError);
+        }
+        const check = utils.checkUserPassword({
+            reqPw: oldPassword,
+            salt: dbUser.salt,
+            userPw: dbUser.password,
+        });
+        if (!check) {
+            return  res.sendError(errorMessage.loginError);
+        }
+        //更新密码
         const { salt, passwordHash } = utils.saltHashPassword(newPassword);
         const ret = await userModule.findOneAndUpdate({_id: user._id}, {
             // ...req.body,
             salt,
             password: passwordHash
         });
+
         await ioRedis.del(`token:${user.token}`)
-        res.sendData(req.user);
+        res.sendData({});
     } catch (error) {
         next(error);
     }