otherwise password is always valid

nixpench · Sep 30, 2017 · c5b984e · c5b984e
1 parent f5af49c
commit c5b984e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/api/models/user.model.js b/src/api/models/user.model.js
@@ -155,7 +155,7 @@ userSchema.statics = {
       isPublic: true,
     };
     if (password) {
-      if (user && user.passwordMatches(password)) {
+      if (user && await user.passwordMatches(password)) {
         return { user, accessToken: user.token() };
       }
       err.message = 'Incorrect email or password';