Merge branch 'develop' into feature/api-adminstats-transactions

api/app/Http/Controllers/UserController.php

@@ -127,6 +127,28 @@ class UserController extends Controller
         return response()->json($user);
     }
 
+
+    public function updatePassword(Request $request, User $user)
+    {
+        $this->authorize('update', $user);
+
+        $validated = $request->validate([
+            'current_password' => 'required|string',
+            'new_password' => 'required|string|min:3|confirmed',
+        ]);
+
+        // Verificar se a password atual está correta
+        if (!Hash::check($validated['current_password'], $user->password)) {
+            return response()->json(['message' => 'Current password is incorrect'], 403);
+        }
+
+        // Atualizar para a nova password
+        $user->password = Hash::make($validated['new_password']);
+        $user->save();
+
+        return response()->json(['message' => 'Password updated successfully']);
+    }
+
     /**
      * DELETE /api/users/{user}
      * Apagar conta (Soft Delete)

api/routes/api.php

@@ -4,8 +4,8 @@ use App\Http\Controllers\AuthController;
 use App\Http\Controllers\GameController;
 use App\Http\Controllers\MatchController;
 use App\Http\Controllers\ProfileController;
-use App\Http\Controllers\UserController;
 use App\Http\Controllers\StatisticsController;
+use App\Http\Controllers\UserController;
 use Illuminate\Support\Facades\Route;
 
 Route::prefix('v1')->group(function () {
@@ -23,6 +23,7 @@ Route::prefix('v1')->group(function () {
         Route::prefix('users/me')->group(function () {
             Route::get('/', [ProfileController::class, 'show']);
             Route::put('/', [ProfileController::class, 'update']);
+            Route::patch('/password', [ProfileController::class, 'updatePassword']);
             Route::delete('/', [ProfileController::class, 'destroy']);
             Route::get('/coins', [ProfileController::class, 'getCoins']);
             Route::put('/password', [