fix request so that only get and post requests are handled

stormpath · Mar 16, 2016 · ef8822a · ef8822a
1 parent 69edbd4
commit ef8822a
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/lib/controllers/change-password.js b/lib/controllers/change-password.js
@@ -32,16 +32,16 @@ module.exports = function (req, res, next) {
 
   helpers.handleAcceptRequest(req, res, {
     'application/json': function () {
+      if (req.method !== 'GET' && req.method !== 'POST') {
+        return next();
+      }
+
       application.verifyPasswordResetToken(sptoken, function (err, result) {
         if (err) {
           logger.info('A user attempted to reset their password with a token, but that token verification failed.');
           return helpers.writeJsonError(res, err);
         }
 
-        if (req.method !== 'POST') {
-          return next();
-        }
-
         result.password = req.body.password;
 
         return result.save(function (err) {