login fix

2026-09-25 10:36:38 +05:30
parent db84a9a752
commit 276e12beb9
7 changed files with 366 additions and 0 deletions
--- a/routes/userroutes.go
+++ b/routes/userroutes.go
@@ -14,6 +14,10 @@ func RegisterUserRoutes(api fiber.Router, f *facade.Facade) {
 	users.Post("/applogin", f.UserController.AppLogin)
 	users.Post("/create", f.UserController.CreateUser)
 	users.Post("/tenant/weblogin", f.UserController.TenantWebLogin)
+
+	// First password, before a session can exist. Public by necessity and safe
+	// because of what it refuses — see userController.SetPassword.
+	users.Post("/setpassword", f.UserController.SetPassword)
 	users.Put("/update", f.UserController.UpdateStaff)
 	users.Delete("/delete", f.UserController.DeleteUser)