feat: connect settings live flow to auth api

apps/admin-api/src/routes/auth.rs

@@ -1,10 +1,11 @@
-use axum::{Json, extract::State, http::StatusCode, response::IntoResponse};
+use axum::{Extension, Json, extract::State, http::StatusCode, response::IntoResponse};
 use axum_extra::extract::cookie::CookieJar;
+use serde_json::json;
 
 use crate::{
-    auth::{cleared_session_cookie, extract_session_token, session_cookie},
+    auth::{AuthenticatedSession, cleared_session_cookie, extract_session_token, session_cookie},
     error::ApiError,
-    service::LoginPayload,
+    service::{ChangePasswordPayload, LoginPayload, UpdateProfilePayload},
     state::AppState,
 };
 
@@ -50,3 +51,35 @@ pub async fn get_session(
 
     Ok(Json(serde_json::json!(session)))
 }
+
+pub async fn get_profile(
+    Extension(session): Extension<AuthenticatedSession>,
+) -> Result<Json<serde_json::Value>, ApiError> {
+    Ok(Json(
+        json!({ "user": session.user, "memberships": session.memberships }),
+    ))
+}
+
+pub async fn update_profile(
+    State(state): State<AppState>,
+    Extension(session): Extension<AuthenticatedSession>,
+    Json(payload): Json<UpdateProfilePayload>,
+) -> Result<Json<serde_json::Value>, ApiError> {
+    let updated = state
+        .service
+        .update_profile(&session.user.id, payload)
+        .await?;
+    Ok(Json(json!(updated)))
+}
+
+pub async fn change_password(
+    State(state): State<AppState>,
+    Extension(session): Extension<AuthenticatedSession>,
+    Json(payload): Json<ChangePasswordPayload>,
+) -> Result<StatusCode, ApiError> {
+    state
+        .service
+        .change_password(&session.user.id, payload)
+        .await?;
+    Ok(StatusCode::NO_CONTENT)
+}