Add settings page with change password, fix terminal ws bug

dashboard/backend/routers/auth.py

@@ -28,7 +28,7 @@ class Verify2FARequest(BaseModel):
 @router.post("/login", response_model=Token)
 async def login(creds: LoginRequest):
     # Verify username/password
-    if creds.username != config.ADMIN_USER or not auth.verify_password(creds.password, config.ADMIN_PASSWORD_HASH):
+    if creds.username != config.ADMIN_USER or not auth.verify_password(creds.password, auth.load_password_hash()):
         raise HTTPException(
             status_code=status.HTTP_401_UNAUTHORIZED,
             detail="Incorrect username or password",
@@ -84,3 +84,16 @@ async def verify_2fa_setup(request: Verify2FARequest, current_user: str = Depend
 async def disable_2fa(current_user: str = Depends(auth.get_current_user)):
     auth.save_totp_secret("")
     return {"message": "2FA disabled"}
+
+class ChangePasswordRequest(BaseModel):
+    current_password: str
+    new_password: str
+
+@router.post("/change-password")
+async def change_password(req: ChangePasswordRequest, current_user: str = Depends(auth.get_current_user)):
+    if not auth.verify_password(req.current_password, auth.load_password_hash()):
+        raise HTTPException(status_code=400, detail="Current password is incorrect")
+    if len(req.new_password) < 8:
+        raise HTTPException(status_code=400, detail="Password must be at least 8 characters")
+    auth.save_password_hash(auth.get_password_hash(req.new_password))
+    return {"message": "Password changed successfully"}