Method update

backend/api/src/users/users.service.ts:60–71

(id: string, updateData: Partial<User>)

  }

  async update(id: string, updateData: Partial<User>): Promise<User> {
    const user = await this.findOne(id);

    if (updateData.password) {
      // Use stronger salt rounds (12 instead of 10) for better security
      const saltRounds = parseInt(process.env.BCRYPT_SALT_ROUNDS || '12');
      updateData.password = await bcrypt.hash(updateData.password, saltRounds);
    }

    Object.assign(user, updateData);
    return this.usersRepository.save(user);
  }

  async remove(id: string): Promise<void> {
    const result = await this.usersRepository.delete(id);