add password confirmation in admin settings

Signed-off-by: Julien Veyssier <julien-nc@posteo.net>

lib/Controller/ConfigController.php

@@ -17,6 +17,7 @@
 use OCP\AppFramework\Controller;
 use OCP\AppFramework\Http;
 use OCP\AppFramework\Http\Attribute\NoAdminRequired;
+use OCP\AppFramework\Http\Attribute\PasswordConfirmationRequired;
 use OCP\AppFramework\Http\DataResponse;
 use OCP\IConfig;
 
@@ -76,6 +77,7 @@ public function setConfig(array $values): DataResponse {
 	 * @param array<string,string> $values
 	 * @return DataResponse
 	 */
+	#[PasswordConfirmationRequired]
 	public function setAdminConfig(array $values): DataResponse {
 		foreach ($values as $key => $value) {
 			$this->config->setAppValue(Application::APP_ID, $key, $value);

package.json

@@ -42,6 +42,7 @@
 		"@nextcloud/initial-state": "^2.2.0",
 		"@nextcloud/l10n": "^3.1.0",
 		"@nextcloud/moment": "^1.3.1",
+		"@nextcloud/password-confirmation": "^5.1.1",
 		"@nextcloud/router": "^3.0.1",
 		"@nextcloud/vue": "^8.18.0",
 		"vue": "^2.6.11",

src/components/AdminSettings.vue

@@ -65,6 +65,7 @@ import { generateUrl } from '@nextcloud/router'
 import axios from '@nextcloud/axios'
 import { delay } from '../utils.js'
 import { showSuccess, showError } from '@nextcloud/dialogs'
+import { confirmPassword } from '@nextcloud/password-confirmation'
 
 export default {
 	name: 'AdminSettings',
@@ -97,7 +98,8 @@ export default {
 				this.saveOptions()
 			}, 2000)()
 		},
-		saveOptions() {
+		async saveOptions() {
+			await confirmPassword()
 			const req = {
 				values: {
 					client_id: this.state.client_id,