fix: do not leak db error messages

2anki · Oct 29, 2022 · 52abe70 · 52abe70
1 parent 88cb979
commit 52abe70
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/routes/users/index.ts b/src/routes/users/index.ts
@@ -36,7 +36,8 @@ router.post('/new-password', async (req, res, next) => {
     await updatePassword(DB, password, resetToken);
     res.status(200).send({ message: 'ok' });
   } catch (error) {
-    next(error);
+    captureException(error);
+    next(new Error('Failed to create new password.'));
   }
 });
 
@@ -149,7 +150,10 @@ router.post('/login', async (req, res, next) => {
         });
     }
   } catch (error) {
-    next(error);
+    captureException(error);
+    next(
+      new Error('Failed to login, please try again or register your account.')
+    );
   }
 });