chore: fix updates

backend/gestion/handlers/auth.go

@@ -327,17 +327,63 @@ func LoginClient(c *gin.Context) {
 		TokenType:   "Bearer",
 		ExpiresIn:   int(clientTokenDuration.Seconds()),
 		User: gin.H{
-			"id":         client.ID,
-			"username":   client.Username,
-			"nom":        client.Nom,
-			"prenom":     client.Prenom,
-			"telephone":  client.Telephone,
-			"role":       "client",
-			"session_id": sessionID,
+			"id":                  client.ID,
+			"username":            client.Username,
+			"nom":                 client.Nom,
+			"prenom":              client.Prenom,
+			"telephone":           client.Telephone,
+			"role":                "client",
+			"session_id":          sessionID,
+			"must_change_password": client.MustChangePassword,
 		},
 	})
 }
 
+// ChangePassword permet à un client de changer son mot de passe
+// PUT /api/v1/auth/change-password
+func ChangePassword(c *gin.Context) {
+	var req struct {
+		CurrentPassword string `json:"current_password" binding:"required"`
+		NewPassword     string `json:"new_password" binding:"required,min=8"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Données invalides", "details": err.Error()})
+		return
+	}
+
+	clientID := c.GetInt("client_id")
+	database := c.MustGet("database").(*db.Database)
+
+	client, err := database.GetClientByID(clientID)
+	if err != nil {
+		log.Printf("❌ [CHANGE_PASSWORD] Client non trouvé: ID=%d", clientID)
+		c.JSON(http.StatusNotFound, gin.H{"error": "Client non trouvé"})
+		return
+	}
+
+	if err := bcrypt.CompareHashAndPassword([]byte(client.Password), []byte(req.CurrentPassword)); err != nil {
+		log.Printf("❌ [CHANGE_PASSWORD] Mot de passe actuel invalide: ID=%d", clientID)
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Mot de passe actuel incorrect"})
+		return
+	}
+
+	hashed, err := bcrypt.GenerateFromPassword([]byte(req.NewPassword), bcrypt.DefaultCost)
+	if err != nil {
+		log.Printf("❌ [CHANGE_PASSWORD] Erreur bcrypt: %v", err)
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur traitement mot de passe"})
+		return
+	}
+
+	if err := database.UpdateClientPasswordAndClearFlag(clientID, string(hashed)); err != nil {
+		log.Printf("❌ [CHANGE_PASSWORD] Erreur update: %v", err)
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur mise à jour mot de passe"})
+		return
+	}
+
+	log.Printf("✅ [CHANGE_PASSWORD] Mot de passe changé: ID=%d", clientID)
+	c.JSON(http.StatusOK, gin.H{"success": true, "message": "Mot de passe mis à jour avec succès"})
+}
+
 // LogoutClient déconnecte un client
 // POST /api/v1/auth/logout
 func LogoutClient(c *gin.Context) {