diff --git a/admin/db-auth.go b/admin/db-auth.go index 088b30a..3bc04b0 100644 --- a/admin/db-auth.go +++ b/admin/db-auth.go @@ -168,6 +168,9 @@ func resetUserPasswd(c *gin.Context) { c.AbortWithStatusJSON(http.StatusInternalServerError, gin.H{"errmsg": err.Error()}) return } + } else if user.CheckAuth(urp.Password) { + c.AbortWithStatusJSON(http.StatusNotAcceptable, gin.H{"errmsg": "The reset password is identical to the current password"}) + return } err = user.DefinePassword(urp.Password)