change password endpoint response about nhost-js-sdk HOT 5 CLOSED

It's being discussed here: nhost/hasura-backend-plus#270. I'll close this one for now.

from nhost-js-sdk.

i think that is too big of a conversation to wrap this in.
here the user is already logged in. there is no security concern.

from nhost-js-sdk.

Oh sorry. I was too quick. I'll re-open.

What's the current generic error message that you see and what would you like it to be instead?

Here's the code on the backend: https://github.com/nhost/hasura-backend-plus/blob/master/src/routes/auth/change-password/change.ts

from nhost-js-sdk.

'Incorrect current password.' is fine. just let it pass through. :)
there is also min length validations. which i dont see in that file but they should come too

from nhost-js-sdk.

closed and solution is explained in #78

from nhost-js-sdk.