candle-annotator/openspec/changes/user-accounts
Marko Djordjevic 93f7d20382 Add PUT /api/auth/password endpoint for credential users
Implements task 6.2: verifies current password with bcryptjs, rejects
OAuth users (no password_hash), validates new password (8+ chars),
hashes and persists the new password.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-02-20 10:21:27 +01:00
..
specs Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
.openspec.yaml Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
design.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
proposal.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00
tasks.md Add PUT /api/auth/password endpoint for credential users 2026-02-20 10:21:27 +01:00
tasks_BACKUP.md Implement task 6.1: Create PUT /api/auth/profile endpoint for updating user display name 2026-02-20 10:20:20 +01:00