Pārlūkot izejas kodu

Revert "remove reset password endpoint"

This reverts commit ee3656d0a27e8e51d57b2c236f8e27ef5537865b.
Daniel Bohry 3 nedēļas atpakaļ
vecāks
revīzija
fa16af2f12

+ 14 - 0
src/main/java/com/danielbohry/authservice/api/UserController.java

@@ -40,6 +40,20 @@ public class UserController {
         return ResponseEntity.status(FORBIDDEN).build();
     }
 
+    @PostMapping("reset-password")
+    public ResponseEntity<AuthenticationResponse> resetPassword(@RequestBody PasswordResetRequest request) {
+        SecurityContext context = SecurityContextHolder.getContext();
+        Object principal = context.getAuthentication().getPrincipal();
+
+        if (principal instanceof ApplicationUser user) {
+            log.info("Resetting password for user [{}]", user.getUsername());
+            var response = service.resetPassword(user.getId(), request.getNewPassword());
+            return ResponseEntity.ok(response);
+        }
+
+        return ResponseEntity.status(UNAUTHORIZED).build();
+    }
+
     @PostMapping("update-profile")
     public ResponseEntity<AuthenticationResponse> updateProfile(@RequestBody ProfileUpdateRequest request) {
         SecurityContext context = SecurityContextHolder.getContext();