change password expose api

src/controllers/auth.controller.ts

@@ -6,6 +6,7 @@ import { logger } from '../utils/logger';
 import { sendMail } from '../utils/mailer';
 import { generateResetToken } from '../utils/tokenUtils';
 import { Op } from 'sequelize';
+import { AuthenticatedRequest } from 'shared/interfaces/user.interface';
 
 export const login = async (req: Request, res: Response) => {
     
@@ -118,4 +119,44 @@ export const resetPassword = async (req: Request, res: Response) => {
         logger.error("Error in reset password: ", error);
         return res.status(500).json({ error: 'Internal server error' });
     }
+}
+
+export const changePassword = async (req: AuthenticatedRequest, res: Response) => {
+    try {
+        const { currentPassword, newPassword, confirmPassword } = req.body;
+
+        const userId = req.user?.id;
+        if (!userId) {
+            return res.status(401).json({ error: 'Unauthorized' });
+        }
+
+        const user = await User.findByPk(userId);
+        if (!user) {
+            return res.status(404).json({ error: 'User not found' });
+        }
+
+        const isPasswordCorrect = await comparePassword(currentPassword, user.password);
+        if (!isPasswordCorrect) {
+            return res.status(400).json({ error: 'Invalid current password' });
+        }
+
+        if (newPassword !== confirmPassword) {
+            return res.status(400).json({ error: 'New passwords do not match' });
+        }
+
+        if (newPassword.length < 8) {
+            return res.status(400).json({ error: 'Password must be at least 8 characters long.' });
+        }
+
+        const hashedPassword = await hashPassword(newPassword);
+        user.password = hashedPassword;
+        await user.save();
+
+
+        return res.status(200).json({ message: 'Password changed successfully' });
+
+    } catch (error) {
+        logger.error("Error changing password: ", error);
+        return res.status(500).json({ error: 'Internal server error' });
+    }
 }

src/routes/auth.routes.ts

@@ -1,9 +1,10 @@
 import express from "express";
 import { validateLogin } from "../validators/login.validator";
-import { forgotPassword, login, resetPassword } from "../controllers/auth.controller";
+import { forgotPassword, login, resetPassword, changePassword } from "../controllers/auth.controller";
 import { handleValidationErrors } from "../middlewares/handleValidatorError";
 import { validateForgotPassword } from "../validators/forgotPassword.validator";
 import { validateResetPassword } from "../validators/resetPassword.validator";
+import { jwtMiddleware } from "../middlewares/authMiddleware";
 
 const authRouter = express.Router();
 
@@ -112,4 +113,44 @@ authRouter.post("/auth/forgot-password", validateForgotPassword, handleValidatio
 authRouter.post("/auth/reset-password", validateResetPassword, handleValidationErrors, resetPassword);
 
 
+/**
+ * @swagger
+ * /api/auth/change-password:
+ *   post:
+ *     summary: Change the current user's password
+ *     tags: [Auth]
+ *     requestBody:
+ *       required: true
+ *       content:
+ *         application/json:
+ *           schema:
+ *             type: object
+ *             required:
+ *               - currentPassword
+ *               - newPassword
+ *               - confirmPassword
+ *             properties:
+ *               currentPassword:
+ *                 type: string
+ *                 description: The current password of the user
+ *               newPassword:
+ *                 type: string
+ *                 description: The new password to be set
+ *               confirmPassword:
+ *                 type: string
+ *                 description: Confirmation of the new password
+ *     responses:
+ *       200:
+ *         description: Password changed successfully
+ *       400:
+ *         description: Validation errors or incorrect current password
+ *       401:
+ *         description: Unauthorized, user not authenticated
+ *       500:
+ *         description: Internal server error
+ */
+authRouter.post('/auth/change-password', jwtMiddleware, changePassword);
+
+
+
 export default authRouter;