feat: password reset by admin (#360)

backend/routes/users/adminResetPassword.js

@@ -0,0 +1,42 @@
+import express from 'express';
+import bcrypt from 'bcrypt';
+import { DataTypes } from 'sequelize';
+import defineUser from '../../models/users.js';
+import authMiddleware from '../../middleware/auth.js';
+const router = express.Router();
+
+export default function (sequelize) {
+  const { verifySignedIn, verifyAdmin } = authMiddleware(sequelize);
+  const User = defineUser(sequelize, DataTypes);
+
+  // Admin resets another user's password
+  router.put('/:id/password', verifySignedIn, verifyAdmin, async (req, res) => {
+    try {
+      const { id } = req.params;
+      const { newPassword } = req.body;
+
+      if (!newPassword) {
+        return res.status(400).send('New password is required');
+      }
+
+      if (newPassword.length < 8) {
+        return res.status(400).send('New password must be at least 8 characters');
+      }
+
+      const user = await User.findByPk(id);
+      if (!user) {
+        return res.status(404).send('User not found');
+      }
+
+      const hashedPassword = await bcrypt.hash(newPassword, 10);
+      await user.update({ password: hashedPassword });
+
+      return res.json({ user: { id: user.id } });
+    } catch (error) {
+      console.error(error);
+      return res.status(500).send('Internal Server Error');
+    }
+  });
+
+  return router;
+}

backend/server.js

@@ -52,6 +52,7 @@ import usersFindRoute from './routes/users/find.js';
 import usersSearchRoute from './routes/users/search.js';
 import usersUpdateUsernameRoute from './routes/users/updateUsername.js';
 import usersUpdatePasswordRoute from './routes/users/updatePassword.js';
+import usersAdminResetPasswordRoute from './routes/users/adminResetPassword.js';
 import usersUpdateAvatarRoute from './routes/users/updateAvatar.js';
 import usersUpdateRoleRoute from './routes/users/updateRole.js';
 import signUpRoute from './routes/users/signup.js';
@@ -61,6 +62,7 @@ app.use('/users', usersFindRoute(sequelize));
 app.use('/users', usersSearchRoute(sequelize));
 app.use('/users', usersUpdateUsernameRoute(sequelize));
 app.use('/users', usersUpdatePasswordRoute(sequelize));
+app.use('/users', usersAdminResetPasswordRoute(sequelize));
 app.use('/users', usersUpdateAvatarRoute(sequelize));
 app.use('/users', usersUpdateRoleRoute(sequelize));
 app.use('/users', signUpRoute(sequelize));