Merge branch 'develop' into feature/api-adminstats-transactions

api/app/Http/Controllers/UserController.php

@@ -127,6 +127,28 @@ class UserController extends Controller
         return response()->json($user);
     }
 
+
+    public function updatePassword(Request $request, User $user)
+    {
+        $this->authorize('update', $user);
+
+        $validated = $request->validate([
+            'current_password' => 'required|string',
+            'new_password' => 'required|string|min:3|confirmed',
+        ]);
+
+        // Verificar se a password atual está correta
+        if (!Hash::check($validated['current_password'], $user->password)) {
+            return response()->json(['message' => 'Current password is incorrect'], 403);
+        }
+
+        // Atualizar para a nova password
+        $user->password = Hash::make($validated['new_password']);
+        $user->save();
+
+        return response()->json(['message' => 'Password updated successfully']);
+    }
+
     /**
      * DELETE /api/users/{user}
      * Apagar conta (Soft Delete)