pws reset

web/src/pages/admin/permissions/logic.rs

@@ -9,14 +9,17 @@ use crate::{
     AppState,
     auth::{
         AddRoleRequest, AssignUserRoleRequest, GrantPermissionRequest, RemoveRoleRequest,
-        RevokePermissionRequest,
+        ResetUserPasswordRequest, RevokePermissionRequest,
     },
     services::{authenticated_request, reject_cross_site},
 };
 
 use super::{
     loader,
-    state::{AddRoleForm, AssignRoleForm, LoadError, PermissionForm, RoleForm, Selection},
+    state::{
+        AddRoleForm, AssignRoleForm, LoadError, PermissionForm, ResetPasswordForm, RoleForm,
+        Selection,
+    },
     ui,
 };
 
@@ -123,6 +126,29 @@ pub(crate) async fn assign_user_role(
     }).await
 }
 
+pub(crate) async fn reset_user_password(
+    State(state): State<AppState>,
+    headers: HeaderMap,
+    Form(form): Form<ResetPasswordForm>,
+) -> Response {
+    let destination = "/admin/permissions?updated=true";
+    let request_headers = headers.clone();
+    mutate(&headers, destination, async move {
+        let mut auth = state.auth;
+        auth.reset_user_password(authenticated_request(
+            &request_headers,
+            ResetUserPasswordRequest {
+                username: form.username,
+                new_password: form.new_password,
+                new_password_confirmation: form.new_password_confirmation,
+            },
+        ).map_err(|_| "Missing session".to_string())?)
+            .await
+            .map_err(|error| error.message().to_string())?;
+        Ok(())
+    }).await
+}
+
 async fn mutate<F>(headers: &HeaderMap, destination: &str, operation: F) -> Response
 where
     F: std::future::Future<Output = Result<(), String>>,

web/src/pages/admin/permissions/mod.rs

@@ -15,4 +15,5 @@ pub(crate) fn router() -> Router<AppState> {
         .route("/admin/permissions/grant", post(logic::grant))
         .route("/admin/permissions/revoke", post(logic::revoke))
         .route("/admin/permissions/users/role", post(logic::assign_user_role))
+        .route("/admin/permissions/users/password", post(logic::reset_user_password))
 }

web/src/pages/admin/permissions/state.rs

@@ -33,6 +33,13 @@ pub(crate) struct AssignRoleForm {
     pub role: String,
 }
 
+#[derive(Clone, Debug, Default, serde::Deserialize)]
+pub(crate) struct ResetPasswordForm {
+    pub username: String,
+    pub new_password: String,
+    pub new_password_confirmation: String,
+}
+
 pub(crate) struct PermissionPageState {
     pub nav: crate::ui::Nav,
     pub roles: Vec<Role>,
@@ -78,6 +85,14 @@ impl PermissionPageState {
             .find(|role| role.name == self.selected_role)
             .is_some_and(|role| !role.built_in && role.kind == "data")
     }
+
+    pub(crate) fn can_reset_password(&self, user: &UserSummary) -> bool {
+        match self.nav.role.as_str() {
+            "superadmin" => user.role != "superadmin",
+            "admin" => !matches!(user.role.as_str(), "superadmin" | "admin"),
+            _ => false,
+        }
+    }
 }
 
 pub(crate) enum LoadError {