Enable updating the password of a user.

{{cookiecutter.project_slug}}/backend/app/app/crud/crud_user.py

@@ -5,7 +5,7 @@
 from app.models.user import User
 from app.schemas.user import UserCreate, UserUpdate
 from app.core.security import verify_password, get_password_hash
-from app.crud.base import CRUDBase
+from app.crud.base import CRUDBase, ModelType, UpdateSchemaType
 
 
 class CRUDUser(CRUDBase[User, UserCreate, UserUpdate]):
@@ -24,6 +24,11 @@ def create(self, db_session: Session, *, obj_in: UserCreate) -> User:
         db_session.refresh(db_obj)
         return db_obj
 
+    def update(self, db_session: Session, *, db_obj: ModelType, obj_in: UpdateSchemaType) -> ModelType:
+        if obj_in.password:
+            db_obj.hashed_password = get_password_hash(obj_in.password)
+        return super().update(db_session, db_obj=db_obj, obj_in=obj_in)
+
     def authenticate(
         self, db_session: Session, *, email: str, password: str
     ) -> Optional[User]:

{{cookiecutter.project_slug}}/backend/app/app/tests/crud/test_user.py

@@ -2,7 +2,7 @@
 
 from app import crud
 from app.db.session import db_session
-from app.schemas.user import UserCreate
+from app.schemas.user import UserCreate, UserUpdate
 from app.tests.utils.utils import random_lower_string
 
 
@@ -27,6 +27,35 @@ def test_authenticate_user():
     assert user.email == authenticated_user.email
 
 
+def test_update_password_authenticate_user():
+    email = random_lower_string()
+    password = random_lower_string()
+    user_in = UserCreate(email=email, password=password)
+    user = crud.user.create(db_session, obj_in=user_in)
+    authenticated_user = crud.user.authenticate(
+        db_session, email=email, password=password
+    )
+    assert authenticated_user
+    assert user.email == authenticated_user.email
+
+    new_password = random_lower_string()
+    update_user = UserUpdate()
+    update_user.password = new_password
+    _ = crud.user.update(db_session=db_session, db_obj=user, obj_in=update_user)
+
+    authenticated_user = crud.user.authenticate(
+        db_session, email=email, password=password
+    )
+    assert not authenticated_user
+
+    authenticated_user = crud.user.authenticate(
+        db_session, email=email, password=new_password
+    )
+    assert authenticated_user
+    assert user.email == authenticated_user.email
+
+
+
 def test_not_authenticate_user():
     email = random_lower_string()
     password = random_lower_string()