up

admin.py

@@ -152,6 +152,8 @@ async def edit_user(
     email: str = Form(...),
     is_admin: bool = Form(False),
     is_active: bool = Form(False),
+    old_password: str = Form(None),
+    new_password: str = Form(None),
     db: Session = Depends(get_db),
 ):
     current_user = login_required(request, db)
@@ -168,10 +170,17 @@ async def edit_user(
             and db.query(User).filter(User.username == new_username).first()
         ):
             raise HTTPException(status_code=400, detail="Username already exists")
+        
         user.username = new_username
         user.email = email
         user.is_admin = is_admin
         user.is_active = is_active
+        
+        if old_password and new_password:
+            if user.password != old_password:
+                raise HTTPException(status_code=400, detail="Incorrect old password")
+            user.password = new_password
+        
         db.commit()
     return RedirectResponse(url="/admin", status_code=status.HTTP_302_FOUND)
 

templates/admin.html

@@ -204,6 +204,14 @@
                             <input type="checkbox" class="form-check-input" id="editIsActive" name="is_active" value="true">
                             <label class="form-check-label" for="editIsActive">Is Active</label>
                         </div>
+                        <div class="mb-3">
+                            <label for="editOldPassword" class="form-label">Old Password</label>
+                            <input type="password" class="form-control" id="editOldPassword" name="old_password">
+                        </div>
+                        <div class="mb-3">
+                            <label for="editNewPassword" class="form-label">New Password</label>
+                            <input type="password" class="form-control" id="editNewPassword" name="new_password">
+                        </div>
                     </div>
                     <div class="modal-footer">
                         <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button>
@@ -330,6 +338,8 @@
             document.getElementById('editEmail').value = email;
             document.getElementById('editIsAdmin').checked = isAdmin;
             document.getElementById('editIsActive').checked = isActive;
+            document.getElementById('editOldPassword').value = '';
+            document.getElementById('editNewPassword').value = '';
             var editUserModal = new bootstrap.Modal(document.getElementById('editUserModal'));
             editUserModal.show();
         }