server/controllers/MeController.js

@@ -280,7 +280,7 @@ class MeController {
     }
 
     const { password, newPassword } = req.body
-    if ((typeof password !== 'string' && password !== null) || (typeof newPassword !== 'string' && newPassword !== null)) {
+    if (!password || !newPassword || typeof password !== 'string' || typeof newPassword !== 'string') {
       return res.status(400).send('Missing or invalid password or new password')
     }