change_password.js

router.post('/change-password', middlewares.updateUserProfile, (req, res, next) => {
  if (req.user.identities[0].isSocial) {
    return sendError(400, 'Cannot update social account', next);
  }

  if (req.body.password !== req.body.confirm) {
    return sendError(400, 'Password mismatch', next);
  }

  return auth0Utils.validatePassword(req.user, req.body.current)
    .then(() => req.auth0.users.update({ id: req.user.id }, { password: req.body.password }))
    .then(() => {
      res.render('account/change-password', userUtils.addOptions(req, { success: true }));
    })
    .catch((err) => {
      if (err.status === 404) {
        return res.render('account/change-password', userUtils.addOptions(req, { error: 'Wrong password' }));
      }

      return next(err);
    });
});