feat: integrate authentication and password management features, including bcrypt for hashing and NextAuth for session handling

app/api/auth/[...nextauth]/route.ts

@@ -0,0 +1,7 @@
+import NextAuth from "next-auth";
+import { authOptions } from "@/lib/auth";
+
+const handler = NextAuth(authOptions);
+
+export { handler as GET, handler as POST };
+

app/api/auth/change-password/route.ts

@@ -0,0 +1,52 @@
+import { NextRequest, NextResponse } from "next/server";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+import { authService } from "@/services/auth.service";
+
+export async function POST(request: NextRequest) {
+  try {
+    // Verify user is authenticated
+    const session = await getServerSession(authOptions);
+    if (!session) {
+      return NextResponse.json(
+        { success: false, error: "Non authentifié" },
+        { status: 401 }
+      );
+    }
+
+    const body = await request.json();
+    const { oldPassword, newPassword } = body;
+
+    if (!oldPassword || !newPassword) {
+      return NextResponse.json(
+        { success: false, error: "Mot de passe requis" },
+        { status: 400 }
+      );
+    }
+
+    if (newPassword.length < 4) {
+      return NextResponse.json(
+        { success: false, error: "Le mot de passe doit contenir au moins 4 caractères" },
+        { status: 400 }
+      );
+    }
+
+    const result = await authService.changePassword(oldPassword, newPassword);
+    
+    if (!result.success) {
+      return NextResponse.json(
+        { success: false, error: result.error },
+        { status: 400 }
+      );
+    }
+
+    return NextResponse.json({ success: true });
+  } catch (error) {
+    console.error("Error changing password:", error);
+    return NextResponse.json(
+      { success: false, error: "Erreur lors du changement de mot de passe" },
+      { status: 500 }
+    );
+  }
+}
+

app/api/backups/[id]/restore/route.ts

@@ -1,10 +1,13 @@
 import { NextRequest, NextResponse } from "next/server";
 import { backupService } from "@/services/backup.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function POST(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> | { id: string } }
 ) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const resolvedParams = params instanceof Promise ? await params : params;
     await backupService.restoreBackup(resolvedParams.id);

app/api/backups/[id]/route.ts

@@ -1,10 +1,13 @@
 import { NextRequest, NextResponse } from "next/server";
 import { backupService } from "@/services/backup.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function DELETE(
   request: NextRequest,
   { params }: { params: Promise<{ id: string }> | { id: string } }
 ) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const resolvedParams = params instanceof Promise ? await params : params;
     await backupService.deleteBackup(resolvedParams.id);

app/api/backups/auto/route.ts

@@ -1,7 +1,10 @@
 import { NextRequest, NextResponse } from "next/server";
 import { backupService } from "@/services/backup.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function POST(_request: NextRequest) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     // Check if automatic backup should run
     const shouldRun = await backupService.shouldRunAutomaticBackup();

app/api/backups/route.ts

@@ -1,7 +1,11 @@
 import { NextRequest, NextResponse } from "next/server";
 import { backupService } from "@/services/backup.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function GET() {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const backups = await backupService.getAllBackups();
     return NextResponse.json({ success: true, data: backups });
@@ -15,6 +19,9 @@ export async function GET() {
 }
 
 export async function POST(request: NextRequest) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const body = await request.json().catch(() => ({}));
     const force = body.force === true; // Only allow force for manual backups

app/api/backups/settings/route.ts

@@ -1,7 +1,10 @@
 import { NextRequest, NextResponse } from "next/server";
 import { backupService } from "@/services/backup.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function GET() {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const settings = await backupService.getSettings();
     return NextResponse.json({ success: true, data: settings });
@@ -15,6 +18,9 @@ export async function GET() {
 }
 
 export async function PUT(request: NextRequest) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const body = await request.json();
     const settings = await backupService.updateSettings(body);

app/api/banking/accounts/route.ts

@@ -1,8 +1,12 @@
 import { NextResponse } from "next/server";
 import { accountService } from "@/services/account.service";
+import { requireAuth } from "@/lib/auth-utils";
 import type { Account } from "@/lib/types";
 
 export async function POST(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const data: Omit<Account, "id"> = await request.json();
     const created = await accountService.create(data);
@@ -17,6 +21,9 @@ export async function POST(request: Request) {
 }
 
 export async function PUT(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const account: Account = await request.json();
     const updated = await accountService.update(account.id, account);
@@ -31,6 +38,9 @@ export async function PUT(request: Request) {
 }
 
 export async function DELETE(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const { searchParams } = new URL(request.url);
     const id = searchParams.get("id");

app/api/banking/categories/route.ts

@@ -1,8 +1,11 @@
 import { NextResponse } from "next/server";
 import { categoryService } from "@/services/category.service";
+import { requireAuth } from "@/lib/auth-utils";
 import type { Category } from "@/lib/types";
 
 export async function POST(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const data: Omit<Category, "id"> = await request.json();
     const created = await categoryService.create(data);
@@ -17,6 +20,9 @@ export async function POST(request: Request) {
 }
 
 export async function PUT(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const category: Category = await request.json();
     const updated = await categoryService.update(category.id, category);
@@ -31,6 +37,9 @@ export async function PUT(request: Request) {
 }
 
 export async function DELETE(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const { searchParams } = new URL(request.url);
     const id = searchParams.get("id");

app/api/banking/folders/route.ts

@@ -1,8 +1,11 @@
 import { NextResponse } from "next/server";
 import { folderService, FolderNotFoundError } from "@/services/folder.service";
+import { requireAuth } from "@/lib/auth-utils";
 import type { Folder } from "@/lib/types";
 
 export async function POST(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const data: Omit<Folder, "id"> = await request.json();
     const created = await folderService.create(data);
@@ -17,6 +20,9 @@ export async function POST(request: Request) {
 }
 
 export async function PUT(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const folder: Folder = await request.json();
     const updated = await folderService.update(folder.id, folder);
@@ -31,6 +37,9 @@ export async function PUT(request: Request) {
 }
 
 export async function DELETE(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const { searchParams } = new URL(request.url);
     const id = searchParams.get("id");

app/api/banking/route.ts

@@ -1,7 +1,11 @@
 import { NextResponse } from "next/server";
 import { bankingService } from "@/services/banking.service";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function GET() {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const data = await bankingService.getAllData();
     return NextResponse.json(data);

app/api/banking/transactions/clear-categories/route.ts

@@ -1,7 +1,10 @@
 import { NextResponse } from "next/server";
 import { prisma } from "@/lib/prisma";
+import { requireAuth } from "@/lib/auth-utils";
 
 export async function POST() {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const result = await prisma.transaction.updateMany({
       where: {

app/api/banking/transactions/route.ts

@@ -1,8 +1,11 @@
 import { NextResponse } from "next/server";
 import { transactionService } from "@/services/transaction.service";
+import { requireAuth } from "@/lib/auth-utils";
 import type { Transaction } from "@/lib/types";
 
 export async function POST(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
   try {
     const transactions: Transaction[] = await request.json();
     const result = await transactionService.createMany(transactions);
@@ -17,6 +20,9 @@ export async function POST(request: Request) {
 }
 
 export async function PUT(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const transaction: Transaction = await request.json();
     const updated = await transactionService.update(
@@ -34,6 +40,9 @@ export async function PUT(request: Request) {
 }
 
 export async function DELETE(request: Request) {
+  const authError = await requireAuth();
+  if (authError) return authError;
+
   try {
     const { searchParams } = new URL(request.url);
     const id = searchParams.get("id");