Add admin password reset functionality for users and customers

internal/user/handler.go

@@ -458,3 +458,48 @@ func (h *Handler) UpdateUserStatus(c echo.Context) error {
 		"message": "User status updated successfully",
 	}, "User status updated successfully")
 }
+
+// ResetUserPassword resets an admin user's password (admin only).
+// @Summary Reset admin user password
+// @Description Generate a new password for an admin user. The plaintext is returned once for manual delivery.
+// @Tags Admin-Users
+// @Accept json
+// @Produce json
+// @Security BearerAuth
+// @Param id path string true "User ID"
+// @Success 200 {object} response.APIResponse{data=AdminResetPasswordResponse}
+// @Failure 400 {object} response.APIResponse
+// @Failure 401 {object} response.APIResponse
+// @Failure 403 {object} response.APIResponse
+// @Failure 404 {object} response.APIResponse
+// @Failure 409 {object} response.APIResponse
+// @Failure 429 {object} response.APIResponse
+// @Failure 500 {object} response.APIResponse
+// @Router /admin/v1/users/{id}/reset-password [post]
+func (h *Handler) ResetUserPassword(c echo.Context) error {
+	c.Response().Header().Set("Cache-Control", "no-store")
+
+	actorID, err := GetUserIDFromContext(c)
+	if err != nil {
+		return response.Unauthorized(c, "Unauthorized")
+	}
+
+	targetID := c.Param("id")
+	result, err := h.service.AdminResetPassword(c.Request().Context(), actorID, targetID)
+	if err != nil {
+		switch err.Error() {
+		case errInvalidUserID.Error():
+			return response.BadRequest(c, "Invalid id", "")
+		case errAdminUserNotFound.Error():
+			return response.NotFound(c, "Admin not found")
+		case errCannotResetPassword.Error():
+			return response.Conflict(c, "Cannot reset password for this user")
+		case errResetPasswordRateHit.Error():
+			return response.TooManyRequests(c, "Too many password reset requests")
+		default:
+			return response.InternalServerError(c, "Failed to reset password")
+		}
+	}
+
+	return response.Success(c, result, "Password has been reset successfully")
+}