mongoose-schema-immutable-field.js

schema.pre('findOneAndUpdate', function (next) {
        const MongooseValidationError = mongoose.Error.ValidationError,
            model = this.model(),
            immutableFields = ['email', 'password'],
            update = this.getUpdate();

        immutableFields.forEach((field) => {
            if (update.hasOwnProperty(field)) {
                model.invalidate(field, `${field} cannot be modified`, update[field], 'immutable');
            }
        });

        if (model.errors) {
            const validationError = new MongooseValidationError(null);
            validationError.errors = model.errors;
            return next(validationError);
        }

        return next();
    });