Method ChangePassword

internal/auth/service.go:103–137

ChangePassword updates the user's password

(ctx context.Context, oldPassword, newPassword string)

// ChangePassword updates the user's password
func (s *Service) ChangePassword(ctx context.Context, oldPassword, newPassword string) error {
	// Get the current user
	user, err := s.userStore.Get(ctx)
	if err != nil {
		return fmt.Errorf("failed to get user: %w", err)
	}

	// Verify old password
	valid, err := VerifyPassword(oldPassword, user.PasswordHash)
	if err != nil {
		return fmt.Errorf("failed to verify password: %w", err)
	}
	if !valid {
		return ErrInvalidCredentials
	}

	// Validate new password strength
	if len(newPassword) < 8 {
		return errors.New("password must be at least 8 characters long")
	}

	// Hash new password
	hashedPassword, err := HashPassword(newPassword)
	if err != nil {
		return fmt.Errorf("failed to hash password: %w", err)
	}

	// Update password
	if err := s.userStore.UpdatePassword(ctx, hashedPassword); err != nil {
		return fmt.Errorf("failed to update password: %w", err)
	}

	log.Info().Msg("Password changed successfully")
	return nil
}

// API Key Management