From 45e8e727596f73144620fdd8db09d1c2dc6ae39e Mon Sep 17 00:00:00 2001
From: advplyr <advplyr@protonmail.com>
Date: Tue, 22 Jul 2025 15:17:00 -0500
Subject: [PATCH] Update change password to support null or empty string
 passwords #4522

---
 server/controllers/MeController.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/controllers/MeController.js b/server/controllers/MeController.js
index 9451a765..20d03242 100644
--- a/server/controllers/MeController.js
+++ b/server/controllers/MeController.js
@@ -280,7 +280,7 @@ class MeController {
     }
 
     const { password, newPassword } = req.body
-    if (!password || !newPassword || typeof password !== 'string' || typeof newPassword !== 'string') {
+    if ((typeof password !== 'string' && password !== null) || (typeof newPassword !== 'string' && newPassword !== null)) {
       return res.status(400).send('Missing or invalid password or new password')
     }