[FIX] Adding a password change verification before perform profile update. (15569)

[tobiasbu]

Closes #15569

Hey, first PR here,

This PR is a possible solution for the 15569 issue.
Basically, I added a comparative method in the server that checks the current password hash with the new password digest.
In the client, when user perform profile update in My Account >Profile, the 'comparison function' is called.

This happens before opening the password confirmation modal window:

• request to the server if the new password is not the same as the previous one
• if yes, opens the confirmation window
• otherwise, throw a toast error

[CLAassistant]

All committers have signed the CLA.

[rodrigok]

Hi @tobiasbu thanks for your contribution.

I agree with this new verification step, but it should be responsibility of the server side only.

Can you move the check here?

[ashwaniYDV]

@rodrigok I think the main problem is to prevent user from setting the same initial password when admin requests them to change their password(due to some security reasons). I think this PR does not solves it. It only allows the user to not set the same previous password while editing profile which is not a security threat. User may set the same password from profile but has to set a different password if admin forces them to do so.

[rodrigok]

Closed in favor of #16331