From e81d0cab42c4472c6662073c6b1e79c2de45c075 Mon Sep 17 00:00:00 2001
From: Isaac Grynsztein <tzahi2g@gmail.com>
Date: Wed, 1 Jul 2020 17:26:32 -0400
Subject: [PATCH] Fixed bug where changing a user's password would change the
 admin's password

---
 backend/app.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backend/app.js b/backend/app.js
index 26d7f87..dda7932 100644
--- a/backend/app.js
+++ b/backend/app.js
@@ -2901,7 +2901,7 @@ app.post('/api/auth/jwtAuth'
         , auth_api.returnAuthResponse
 );
 app.post('/api/auth/changePassword', optionalJwt, async (req, res) => {
-    let user_uid = req.user.uid;
+    let user_uid = req.body.user_uid;
     let password = req.body.new_password;
     let success = await auth_api.changeUserPassword(user_uid, password);
     res.send({success: success});