Create POST /api/users/{id}/change-password endpoint #29

Closed
opened 2025-11-20 22:12:09 +00:00 by KZix · 1 comment
Owner

Acceptance Criteria:

  • Require old password verification
  • Validate new password (min 3 chars)
  • Hash new password securely
  • Users can only change own password
  • Return 400 if old password incorrect
  • Return 401 if unauthorized
  • Return success message
**Acceptance Criteria:** - [x] Require old password verification - [x] Validate new password (min 3 chars) - [x] Hash new password securely - [x] Users can only change own password - [x] Return 400 if old password incorrect - [x] Return 401 if unauthorized - [x] Return success message
KZix added the authfeatureapi labels 2025-11-20 22:12:09 +00:00
KZix added this to the Bisca - API project 2025-11-20 22:12:09 +00:00
Owner

is this endpoint going to be used by their own users? if so do we really need the {id} in the endpoint... maybe just /api/users/me/change-password

is this endpoint going to be used by their own users? if so do we really need the {id} in the endpoint... maybe just /api/users/me/change-password
FernandoJVideira moved this to To Do in Bisca - API on 2025-12-30 10:30:41 +00:00
FernandoJVideira moved this to In Progress in Bisca - API on 2025-12-30 10:30:44 +00:00
FernandoJVideira self-assigned this 2025-12-30 10:30:54 +00:00
FernandoJVideira added reference feature/api-update-password 2025-12-30 11:12:57 +00:00
Edd closed this issue 2025-12-30 17:18:03 +00:00
Edd moved this to Done in Bisca - API on 2025-12-30 17:18:11 +00:00
Edd moved this to In Progress in Bisca - API on 2025-12-30 17:18:25 +00:00
KZix moved this to Done in Bisca - API on 2025-12-30 17:31:37 +00:00
Sign in to join this conversation.
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SyntaxSquad/DADProject#29