check if password confirmation matches password

src/client/js/components/PasswordResetExecutionForm.jsx

@@ -34,7 +34,7 @@ const PasswordResetExecutionForm = (props) => {
 
     try {
       await appContainer.apiv3Put('/forgot-password', {
-        email, newPassword,
+        email, newPassword, newPasswordConfirm,
       });
 
       setNewPassword('');

src/server/routes/apiv3/forgot-password.js

@@ -19,6 +19,7 @@ module.exports = (crowi) => {
       body('newPassword').isString().not().isEmpty()
         .isLength({ min: 6 })
         .withMessage('password must be at least 6 characters long'),
+      // checking if password confirmation matches password
       body('newPasswordConfirm').isString().not().isEmpty()
         .custom((value, { req }) => {
           return (value === req.body.newPassword);