Best practice in changing logged-in user password

[bgeneto]

Where in the documentation can I find the preferred method for changing a logged-in user's password?
Could someone plz show me the simplest way to achieve this task?

If I use $users->save() or update() from user's Entity then it seems that I will need the users' email (even if I'm using username instead of email to login, i.e., commented email in the $validField config). And since the auth()->user() has no email property avail I need to get the complete entity/model via findById(), even though the user_id() is known.

I could use setPassword() but it seems to have no effect. We need to call saveEmailIdentity() right after, even though I'm not using email for login (this name seems awkward to me). I think this need to be properly documented.

Is there any straightforward (standard/preferred) way to change logged-in user's password using CI4 Shield?

TIA.

[datamweb]

Please see editing-a-user.
An implementation is described in #639, which you can see in step 5.
If you think there is a need for a special explanation to change the password, you can send PRs.

[datamweb]

@bgeneto Thanks for your nice review. I updated #639 .

[kenjis]

model(setting('Auth.userProvider')) is correct, but you cannot autocomplete with $users.
auth()->getProvider() is better?

[datamweb]

@kenjis, do you mean the code below doesn't work?

            // Success!
            $users = model(setting('Auth.userProvider'));
            $user = auth()->user()->fill([
                'password' => 'newPass'
            ]);
            $users->save($user);

I tested the above code, it seems to work fine.
Maybe I didn't understand what you mean.

[kenjis]

It does work.
I mean autocompletion in IDE. When you type $users->s, your IDE autocompletes $users->save()?

[datamweb]

Hmm, yes auth()->getProvider() looks better.