auth

var ChangePasswordHandler = Required(func(w http.ResponseWriter, r *http.Request) {
	user, err := UserFromRequest(r)
	if err != nil {
		logrus.Errorf("Error while getting user from request context: %+v", err)
		utils.Error(w, utils.InternalErrorResponse("No authorized user for this request"))
		return
	}

	var form struct {
		OldPassword string `json:"old_password" validate:"required"`
		NewPassword string `json:"new_password" validate:"required,min=6"`
	}
	if err := utils.UnmarshalForm(w, r, &form); err != nil {
		return
	}

	if checkPassword(user, form.OldPassword) {
		err := setPassword(&user, form.NewPassword)
		if err != nil {
			logrus.Errorf("Cannot set new password for user: %s, error: %+v", user.Login, err)
			utils.Error(w, utils.InternalErrorResponse("Cannot store password"))
			return
		}
		err = store.Auth.UpdateUser(user)
		if err != nil {
			logrus.Errorf("Cannot save new password for user: %s, error: %+v", user.Login, err)
			utils.Error(w, utils.InternalErrorResponse("Cannot store password"))
			return
		}
		utils.Ok(w, nil)
	} else {
		logrus.Infof("Cannot change password for user %s: incorrect current password", user.Login)
		utils.Error(w, utils.JSONErrorResponse{
			Status:        http.StatusNotAcceptable,
			Message:       "Incorrect current password",
			ClientMessage: "Неправильный текущий пароль",
		})
	}
})

var UserInfoHandler = Required(func(w http.ResponseWriter, r *http.Request) {
	u, err := UserFromRequest(r)
	if err != nil {
		logrus.Errorf("Error while getting user from request context: %+v", err)
		utils.Error(w, utils.InternalErrorResponse("No authorized user for this request"))
		return
	}
	utils.Ok(w, NewAPIUser(u))
})