Create endpoints to allow users to update their profile information and passwords.

[jean-michelet]

No description provided.

[Mathieuka]

Hello @jean-michelet if it is available, can you assign it to me ?

Thx

[jean-michelet]

Go ahead!

[Mathieuka]

For the password update scenario, prior authentication is logically required.

Currently, passwords in the database are stored in plain text via seeding.

For authentication, we apply a hashing function to the plain text password, which means it is impossible to correctly compare the password entered by the user.

const user = ... // user from db

// user.password is an plain text password and i think fastify.compare applies a hash function to it
const isPasswordValid = await fastify.compare(password, user.password)

Before the implementation of the update endpoint, I propose, in the same pull request, to modify the seeding to store passwords in a hashed format rather than in plain text to resolve this issue.

We can also include demonstration passwords in the documentation.

Did I miss anything?

[jean-michelet]

Currently, passwords in the database are stored in plain text via seeding.

No, we use a scriptHash function:

demo/scripts/seed-database.ts

Line 51 in 9455f5c

const hash = await scryptHash('password123$')

[Mathieuka]

Currently, passwords in the database are stored in plain text via seeding.

No, we use a scriptHash function:

demo/scripts/seed-database.ts

Line 51 in 9455f5c

const hash = await scryptHash('password123$')

Yeah my bad, I didn't see that