feat(user): implement force password reset

[apoorvdixit88]

Type of Change

• Bugfix
• New feature
• Enhancement
• Refactoring
• Dependency updates
• Documentation
• CI/CD

Description

For newly invited users, add support to have check for whether password has been changed once or not.

• Use enum IsChangePasswordRequired to have this check.

Additional Changes

• This PR modifies the API contract
• This PR modifies the database schema
• This PR modifies application configuration/environment variables

Motivation and Context

For users with email feature flag disabled, there is no support to know whether the newly invited user has change password or not.

How did you test it?

For Test
Invite user

curl --location 'http://localhost:8080/user/user/invite' \
--header 'Authorization: Bearer JWT' \
--header 'Content-Type: application/json' \
--data-raw '{
  "email": "[email protected]",
    "name": "test3",
    "role_id": "merchant_admin"
}
'

Invited user signin

curl --location 'http://localhost:8080/user/signin' \
--header 'Content-Type: application/json' \
--header 'Cookie: token=JWT' \
--data-raw '{
    
    
    "email": "[email protected]",
    "password": "926fc057-df2e-42af-aada-5e403487f3aa"

}'

Check value of Enum IsChangePasswordRequired

curl --location --request GET 'http://localhost:8080/user/data?keys=IsChangePasswordRequired' \
--header 'Authorization: Bearer JWT' \
--header 'Content-Type: application/json' \
--data '
'

Response:

[
    {
        "IsChangePasswordRequired": true
    }
]

Change Password:

curl --location 'http://localhost:8080/user/change_password' \
--header 'Content-Type: application/json' \
--header 'Cookie: token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoiMWZjNzgyOTUtM2JiMy00OGJjLThlZDgtNzFjMzVjMzMxYWU2IiwibWVyY2hhbnRfaWQiOiJtZXJjaGFudF8xNjk3NzE2ODcwIiwicm9sZV9pZCI6Im1lcmNoYW50X2FkbWluIiwiZXhwIjoxNjk3ODg5NjcxLCJvcmdfaWQiOiJvcmdfejQ5ZExMeTdmbllUODN5TDY3clEifQ.CJzEQ2qbhn-qUiiVBSdvCJiLvWp-5wCF9R54gth6QbQ' \
--header 'Authorization: Bearer JWT' \
--data '{
    "old_password": "926fc057-df2e-42af-aada-5e403487f3aa",
    "new_password": "test"
}
'

Again checking the value of enum after login:

curl --location --request GET 'http://localhost:8080/user/data?keys=IsChangePasswordRequired' \
--header 'Authorization: Bearer JWT' \
--header 'Content-Type: application/json' \
--data '
'

Response should be:

[
    {
        "IsChangePasswordRequired": false
    }
]

Checklist

• I formatted the code cargo +nightly fmt --all
• I addressed lints thrown by cargo clippy
• I reviewed the submitted code
• I added unit tests for my changes where possible
• I added a CHANGELOG entry if applicable

[ThisIsMani]

Can we rename the other db delete function.

[ThisIsMani]

Minor concerns

[ThisIsMani]

Don't have to clone this probably.

[racnan]

log the error.

[racnan]

unnecessary variable assignment.

[Narayanbhat166]

This needs a migration change right @apoorvdixit88?