main
use ::session::{AuthedUser, Session};
use api::http::{HeaderMap, Json, State};
use api::rest::{AppResponseData, NoData};
use serde::Deserialize;
use utoipa::ToSchema;
use crate::AuthService;
use crate::errors::ApiError;
use crate::share::account_helpers;
#[derive(Debug, Deserialize, ToSchema)]
pub struct ChangePasswordCmd {
pub old_password: String,
pub new_password: String,
}
#[utoipa::path(
post,
path = "/auth/password/change",
tag = "auth",
description = "修改当前账号口令，成功后吊销除当前会话以外的全部会话。",
request_body = ChangePasswordCmd,
responses(
(status = 200, description = "password changed", body = AppResponseData<NoData>),
(status = 400, description = "request failed validation", body = AppResponseData<NoData>),
(status = 401, description = "authentication required", body = AppResponseData<NoData>)
)
)]
pub async fn change_password(
State(service): State<AuthService>,
session: Session,
AuthedUser(uid): AuthedUser,
headers: HeaderMap,
Json(cmd): Json<ChangePasswordCmd>,
) -> Result<AppResponseData<NoData>, ApiError> {
let keep = session.session_id().unwrap_or_default();
service
.change_password(
uid,
&account_helpers::digest(&cmd.old_password),
&account_helpers::digest(&cmd.new_password),
keep.as_str(),
&account_helpers::client_ip(&headers),
)
.await
.map_err(|error| ApiError::bad_request(error.to_string()))?;
Ok(AppResponseData::empty())
}