package v1 import ( "code.vikunja.io/api/models" "code.vikunja.io/api/routes/crud" "github.com/labstack/echo" "net/http" ) // UserPassword holds a user password. Used to update it. type UserPassword struct { OldPassword string `json:"old_password"` NewPassword string `json:"new_password"` } // UserChangePassword is the handler to change a users password func UserChangePassword(c echo.Context) error { // swagger:operation POST /user/password user updatePassword // --- // summary: Shows the current user // consumes: // - application/json // produces: // - application/json // parameters: // - name: body // in: body // schema: // "$ref": "#/definitions/Password" // responses: // "200": // "$ref": "#/responses/Message" // "400": // "$ref": "#/responses/Message" // "404": // "$ref": "#/responses/Message" // "500": // "$ref": "#/responses/Message" // Check if the user is itself doer, err := models.GetCurrentUser(c) if err != nil { return echo.NewHTTPError(http.StatusInternalServerError, "Error getting current user.") } // Check for Request Content var newPW UserPassword if err := c.Bind(&newPW); err != nil { return echo.NewHTTPError(http.StatusBadRequest, "No password provided.") } // Check the current password if _, err = models.CheckUserCredentials(&models.UserLogin{Username: doer.Username, Password: newPW.OldPassword}); err != nil { return crud.HandleHTTPError(err) } // Update the password if err = models.UpdateUserPassword(&doer, newPW.NewPassword); err != nil { return crud.HandleHTTPError(err) } return c.JSON(http.StatusOK, models.Message{"The password was updated successfully."}) }