/** * Change Password DTO * * Used for authenticated password changes. * User must provide their current password for security verification. * * Security: * - Old password verified before allowing change * - New password validated for minimum strength * - Password history checked (configurable) * - Max length prevents DoS via Argon2 hashing * * @example * ```typescript * POST /auth/change-password * Authorization: Bearer * { * "oldPassword": "currentPassword123", * "newPassword": "newSecurePassword456" * } * ``` */ export declare class ChangePasswordDTO { /** * Current password * * Validation: * - Must be a string * * Note: NOT trimmed (passwords can have leading/trailing spaces) */ oldPassword: string; /** * New password * * Validation: * - Must be a string * - Min 8 characters (security requirement) * - Max 128 characters (prevents DoS via Argon2 hashing) * * Note: NOT trimmed (passwords can have leading/trailing spaces) * * Additional checks in service layer: * - Password history (prevent reuse of recent passwords) * - Password strength (if configured) * - Not same as old password */ newPassword: string; } //# sourceMappingURL=change-password.dto.d.ts.map