lambda-erp 0.1.14__tar.gz → 0.1.16__tar.gz

{lambda_erp-0.1.14 → lambda_erp-0.1.16}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lambda-erp
-Version: 0.1.14
+Version: 0.1.16
 Summary: Core ERP logic - accounting, sales, purchasing, inventory
 Author: TORUS INVESTMENTS AG
 License-Expression: MIT

{lambda_erp-0.1.14 → lambda_erp-0.1.16}/api/auth.py

@@ -173,6 +173,11 @@ class ChangeRoleRequest(BaseModel):
     role: str
 
 
+class ChangePasswordRequest(BaseModel):
+    current_password: str
+    new_password: str
+
+
 # ---------------------------------------------------------------------------
 # Dependencies
 # ---------------------------------------------------------------------------
@@ -351,6 +356,28 @@ def me(user: dict = Depends(get_current_user)):
     return {"name": user["name"], "email": user["email"], "full_name": user["full_name"], "role": user["role"]}
 
 
+@router.post("/change-password")
+def change_password(data: ChangePasswordRequest, user: dict = Depends(get_current_user)):
+    """Change the signed-in user's own password (verifies the current one)."""
+    # The public_manager is a shared demo account — no real password to change.
+    if user["role"] == "public_manager":
+        raise HTTPException(status_code=403, detail="Demo accounts cannot change password")
+
+    if len(data.new_password) < 6:
+        raise HTTPException(status_code=422, detail="Password must be at least 6 characters")
+
+    db = get_db()
+    rows = db.sql('SELECT hashed_password FROM "User" WHERE name = ?', [user["name"]])
+    if not rows:
+        raise HTTPException(status_code=404, detail="User not found")
+    if not verify_password(data.current_password, rows[0]["hashed_password"]):
+        raise HTTPException(status_code=403, detail="Current password is incorrect")
+
+    db.set_value("User", user["name"],
+                 {"hashed_password": hash_password(data.new_password), "modified": now()})
+    return {"ok": True}
+
+
 @router.post("/invite")
 def create_invite(data: InviteRequest, user: dict = Depends(require_admin)):
     db = get_db()

{lambda_erp-0.1.14 → lambda_erp-0.1.16}/frontend/src/api/client.ts

@@ -366,6 +366,11 @@ export const api = {
     request<any>("/auth/login", { method: "POST", body: JSON.stringify({ email, password }) }),
   authLogout: () => request<any>("/auth/logout", { method: "POST" }),
   authMe: () => request<any>("/auth/me"),
+  authChangePassword: (current_password: string, new_password: string) =>
+    request<any>("/auth/change-password", {
+      method: "POST",
+      body: JSON.stringify({ current_password, new_password }),
+    }),
   authInvite: (email: string, role: string) =>
     request<any>("/auth/invite", { method: "POST", body: JSON.stringify({ email, role }) }),
   authListUsers: () => request<any[]>("/auth/users"),

{lambda_erp-0.1.14 → lambda_erp-0.1.16}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lambda-erp"
-version = "0.1.14"
+version = "0.1.16"
 description = "Core ERP logic - accounting, sales, purchasing, inventory"
 readme = "README.md"
 license = "MIT"