feat: update password

app/Http/Controllers/AuthController.php

@@ -7,6 +7,7 @@ use App\Http\Requests\ForgotPasswordRequest;
 use App\Http\Requests\LoginRequest;
 use App\Http\Requests\RegisterRequest;
 use App\Http\Requests\ResetPasswordRequest;
+use App\Http\Requests\UpdatePasswordRequest;
 use App\Http\Requests\UpdateUserRequest;
 use App\Http\Resources\UserResource;
 use App\Models\User;
@@ -255,7 +256,7 @@ class AuthController extends Controller
                 Storage::disk()->delete($user->avatar_url);
             }
 
-            $path = $request->file('avatar')->store('avatars', );
+            $path = $request->file('avatar')->store('avatars');
             $data['avatar_url'] = $path;
         }
 
@@ -275,6 +276,32 @@ class AuthController extends Controller
         return new UserResource($user->fresh());
     }
 
+    public function updatePassword(UpdatePasswordRequest $request): JsonResponse
+    {
+        $user = $request->user();
+
+        abort_if($user->isSuspended(), 403, __('api.auth.suspended'));
+
+        $currentAccessToken = $user->currentAccessToken();
+
+        $user->forceFill([
+            'password' => Hash::make($request->validated('password')),
+            'remember_token' => Str::random(60),
+        ])->save();
+
+        if ($currentAccessToken instanceof PersonalAccessToken) {
+            $user->tokens()
+                ->whereKeyNot($currentAccessToken->getKey())
+                ->delete();
+        } else {
+            $user->tokens()->delete();
+        }
+
+        return response()->json([
+            'message' => __('api.auth.password_updated'),
+        ]);
+    }
+
     public function destroy(Request $request): JsonResponse
     {
         $user = $request->user();