diff --git a/apps/web/pages/api/auth/reset-password.ts b/apps/web/pages/api/auth/reset-password.ts index 89ed6108c..bc42e2339 100644 --- a/apps/web/pages/api/auth/reset-password.ts +++ b/apps/web/pages/api/auth/reset-password.ts @@ -48,9 +48,9 @@ async function postHandler(req: NextApiRequest, res: NextApiResponse) { password: hashedPassword, }, }), - prisma.passwordResetToken.delete({ + prisma.passwordResetToken.deleteMany({ where: { - token, + userId: foundToken.userId, }, }), ]);