From 9047414ecd46f12220f138653e079ecb2a56a23d Mon Sep 17 00:00:00 2001 From: glenneth Date: Mon, 3 Nov 2025 20:40:17 +0300 Subject: [PATCH] revert: Revert auth-routes changes that broke compilation Reverted to working version before password API additions. The password APIs and UI are still in place (admin.ctml, admin.js). Need to re-add the backend APIs more carefully. Build now succeeds. --- auth-routes.lisp | 48 ------------------------------------------------ 1 file changed, 48 deletions(-) diff --git a/auth-routes.lisp b/auth-routes.lisp index dee4714..9a9942a 100644 --- a/auth-routes.lisp +++ b/auth-routes.lisp @@ -105,51 +105,3 @@ (api-output `(("status" . "error") ("message" . ,(format nil "Error creating user: ~a" e))) :status 500)))) - -;; API: Change own password (authenticated users) -(define-api asteroid/user/change-password (current-password new-password) () - "API endpoint for users to change their own password" - (require-authentication) - (with-error-handling - (if (and current-password new-password) - (let* ((current-user (get-current-user)) - (username (gethash "username" current-user)) - (stored-hash (gethash "password-hash" current-user))) - ;; Verify current password - (if (verify-password current-password - (if (listp stored-hash) (first stored-hash) stored-hash)) - ;; Current password is correct, update to new password - (if (reset-user-password username new-password) - (api-output `(("status" . "success") - ("message" . "Password changed successfully"))) - (api-output `(("status" . "error") - ("message" . "Failed to update password")) - :status 500)) - ;; Current password is incorrect - (api-output `(("status" . "error") - ("message" . "Current password is incorrect")) - :status 401))) - (api-output `(("status" . "error") - ("message" . "Missing required fields")) - :status 400)))) - -;; API: Reset user password (admin only) -(define-api asteroid/admin/reset-password (username new-password) () - "API endpoint for admins to reset any user's password" - (require-role :admin) - (with-error-handling - (if (and username new-password) - (let ((user (find-user-by-username username))) - (if user - (if (reset-user-password username new-password) - (api-output `(("status" . "success") - ("message" . ,(format nil "Password reset for user: ~a" username)))) - (api-output `(("status" . "error") - ("message" . "Failed to reset password")) - :status 500)) - (api-output `(("status" . "error") - ("message" . ,(format nil "User not found: ~a" username))) - :status 404))) - (api-output `(("status" . "error") - ("message" . "Missing required fields")) - :status 400))))