Fix multiple production issues and add password change functionality

- Fixed frontend API URL configuration to use correct port 3002
- Fixed create event functionality by adding proper endpoint and fixing JSON parsing
- Fixed email settings save functionality by importing logActivity correctly
- Fixed admin settings save functionality by using api client instead of direct fetch
- Implemented password change functionality with modal and backend endpoint
- Added updated_at column to admin_users table
- Fixed all mock data issues - now using real backend data throughout

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/src/components/admin/AdminHeader.tsx

@@ -1,10 +1,11 @@
 import React, { useState, useRef } from 'react';
 import { useNavigate } from 'react-router-dom';
-import { Menu, User, LogOut, Settings, Bell } from 'lucide-react';
+import { Menu, User, LogOut, Settings, Bell, Lock } from 'lucide-react';
 import { format } from 'date-fns';
 
 import { useAdminAuth } from '../../contexts';
 import { useOnClickOutside } from '../../hooks/useOnClickOutside';
+import { PasswordChangeModal } from './PasswordChangeModal';
 
 interface AdminHeaderProps {
   onMenuClick: () => void;
@@ -15,6 +16,7 @@ export const AdminHeader: React.FC<AdminHeaderProps> = ({ onMenuClick }) => {
   const { user, logout } = useAdminAuth();
   const [showUserMenu, setShowUserMenu] = useState(false);
   const [showNotifications, setShowNotifications] = useState(false);
+  const [showPasswordModal, setShowPasswordModal] = useState(false);
   
   const userMenuRef = useRef<HTMLDivElement>(null);
   const notificationRef = useRef<HTMLDivElement>(null);
@@ -136,6 +138,16 @@ export const AdminHeader: React.FC<AdminHeaderProps> = ({ onMenuClick }) => {
                     <Settings className="w-4 h-4" />
                     Settings
                   </button>
+                  <button
+                    onClick={() => {
+                      setShowUserMenu(false);
+                      setShowPasswordModal(true);
+                    }}
+                    className="w-full px-4 py-2 text-left text-sm text-neutral-700 hover:bg-neutral-50 flex items-center gap-3"
+                  >
+                    <Lock className="w-4 h-4" />
+                    Change Password
+                  </button>
                   <button
                     onClick={handleLogout}
                     className="w-full px-4 py-2 text-left text-sm text-neutral-700 hover:bg-neutral-50 flex items-center gap-3"
@@ -149,6 +161,12 @@ export const AdminHeader: React.FC<AdminHeaderProps> = ({ onMenuClick }) => {
           </div>
         </div>
       </div>
+      
+      {/* Password Change Modal */}
+      <PasswordChangeModal 
+        isOpen={showPasswordModal} 
+        onClose={() => setShowPasswordModal(false)} 
+      />
     </header>
   );
 };

frontend/src/components/admin/PasswordChangeModal.tsx

@@ -0,0 +1,234 @@
+import React, { useState } from 'react';
+import { X, Lock, Eye, EyeOff, AlertCircle } from 'lucide-react';
+import { toast } from 'react-toastify';
+import { useMutation } from '@tanstack/react-query';
+
+import { Button, Input, Card } from '../common';
+import { adminService } from '../../services/admin.service';
+
+interface PasswordChangeModalProps {
+  isOpen: boolean;
+  onClose: () => void;
+}
+
+export const PasswordChangeModal: React.FC<PasswordChangeModalProps> = ({ isOpen, onClose }) => {
+  const [formData, setFormData] = useState({
+    currentPassword: '',
+    newPassword: '',
+    confirmPassword: ''
+  });
+  const [showPasswords, setShowPasswords] = useState({
+    current: false,
+    new: false,
+    confirm: false
+  });
+  const [errors, setErrors] = useState<Record<string, string>>({});
+
+  const changePasswordMutation = useMutation({
+    mutationFn: adminService.changePassword,
+    onSuccess: () => {
+      toast.success('Password changed successfully');
+      onClose();
+      // Reset form
+      setFormData({
+        currentPassword: '',
+        newPassword: '',
+        confirmPassword: ''
+      });
+      setErrors({});
+    },
+    onError: (error: any) => {
+      if (error.response?.data?.error) {
+        toast.error(error.response.data.error);
+      } else {
+        toast.error('Failed to change password');
+      }
+    }
+  });
+
+  const validateForm = (): boolean => {
+    const newErrors: Record<string, string> = {};
+
+    if (!formData.currentPassword) {
+      newErrors.currentPassword = 'Current password is required';
+    }
+
+    if (!formData.newPassword) {
+      newErrors.newPassword = 'New password is required';
+    } else if (formData.newPassword.length < 6) {
+      newErrors.newPassword = 'Password must be at least 6 characters';
+    }
+
+    if (!formData.confirmPassword) {
+      newErrors.confirmPassword = 'Please confirm your new password';
+    } else if (formData.newPassword !== formData.confirmPassword) {
+      newErrors.confirmPassword = 'Passwords do not match';
+    }
+
+    if (formData.currentPassword === formData.newPassword) {
+      newErrors.newPassword = 'New password must be different from current password';
+    }
+
+    setErrors(newErrors);
+    return Object.keys(newErrors).length === 0;
+  };
+
+  const handleSubmit = (e: React.FormEvent) => {
+    e.preventDefault();
+    
+    if (!validateForm()) {
+      return;
+    }
+
+    changePasswordMutation.mutate({
+      currentPassword: formData.currentPassword,
+      newPassword: formData.newPassword
+    });
+  };
+
+  const handleInputChange = (field: keyof typeof formData) => (e: React.ChangeEvent<HTMLInputElement>) => {
+    setFormData(prev => ({ ...prev, [field]: e.target.value }));
+    // Clear error when user types
+    if (errors[field]) {
+      setErrors(prev => ({ ...prev, [field]: '' }));
+    }
+  };
+
+  if (!isOpen) return null;
+
+  return (
+    <div className="fixed inset-0 bg-black bg-opacity-50 flex items-center justify-center p-4 z-50">
+      <Card className="w-full max-w-md">
+        <div className="p-6">
+          <div className="flex items-center justify-between mb-4">
+            <h2 className="text-xl font-semibold text-neutral-900">Change Password</h2>
+            <button
+              onClick={onClose}
+              className="p-1 hover:bg-neutral-100 rounded-lg transition-colors"
+            >
+              <X className="w-5 h-5 text-neutral-500" />
+            </button>
+          </div>
+
+          <form onSubmit={handleSubmit} className="space-y-4">
+            {/* Current Password */}
+            <div>
+              <label htmlFor="currentPassword" className="block text-sm font-medium text-neutral-700 mb-1">
+                Current Password
+              </label>
+              <div className="relative">
+                <Input
+                  id="currentPassword"
+                  type={showPasswords.current ? 'text' : 'password'}
+                  value={formData.currentPassword}
+                  onChange={handleInputChange('currentPassword')}
+                  error={errors.currentPassword}
+                  placeholder="Enter current password"
+                  leftIcon={<Lock className="w-5 h-5 text-neutral-400" />}
+                />
+                <button
+                  type="button"
+                  onClick={() => setShowPasswords(prev => ({ ...prev, current: !prev.current }))}
+                  className="absolute right-3 top-2 p-1 hover:bg-neutral-100 rounded"
+                >
+                  {showPasswords.current ? 
+                    <EyeOff className="w-4 h-4 text-neutral-500" /> : 
+                    <Eye className="w-4 h-4 text-neutral-500" />
+                  }
+                </button>
+              </div>
+            </div>
+
+            {/* New Password */}
+            <div>
+              <label htmlFor="newPassword" className="block text-sm font-medium text-neutral-700 mb-1">
+                New Password
+              </label>
+              <div className="relative">
+                <Input
+                  id="newPassword"
+                  type={showPasswords.new ? 'text' : 'password'}
+                  value={formData.newPassword}
+                  onChange={handleInputChange('newPassword')}
+                  error={errors.newPassword}
+                  placeholder="Enter new password"
+                  leftIcon={<Lock className="w-5 h-5 text-neutral-400" />}
+                />
+                <button
+                  type="button"
+                  onClick={() => setShowPasswords(prev => ({ ...prev, new: !prev.new }))}
+                  className="absolute right-3 top-2 p-1 hover:bg-neutral-100 rounded"
+                >
+                  {showPasswords.new ? 
+                    <EyeOff className="w-4 h-4 text-neutral-500" /> : 
+                    <Eye className="w-4 h-4 text-neutral-500" />
+                  }
+                </button>
+              </div>
+            </div>
+
+            {/* Confirm Password */}
+            <div>
+              <label htmlFor="confirmPassword" className="block text-sm font-medium text-neutral-700 mb-1">
+                Confirm New Password
+              </label>
+              <div className="relative">
+                <Input
+                  id="confirmPassword"
+                  type={showPasswords.confirm ? 'text' : 'password'}
+                  value={formData.confirmPassword}
+                  onChange={handleInputChange('confirmPassword')}
+                  error={errors.confirmPassword}
+                  placeholder="Confirm new password"
+                  leftIcon={<Lock className="w-5 h-5 text-neutral-400" />}
+                />
+                <button
+                  type="button"
+                  onClick={() => setShowPasswords(prev => ({ ...prev, confirm: !prev.confirm }))}
+                  className="absolute right-3 top-2 p-1 hover:bg-neutral-100 rounded"
+                >
+                  {showPasswords.confirm ? 
+                    <EyeOff className="w-4 h-4 text-neutral-500" /> : 
+                    <Eye className="w-4 h-4 text-neutral-500" />
+                  }
+                </button>
+              </div>
+            </div>
+
+            {/* Password Requirements */}
+            <div className="bg-blue-50 border border-blue-200 rounded-lg p-3">
+              <div className="flex items-start gap-2">
+                <AlertCircle className="w-5 h-5 text-blue-600 flex-shrink-0 mt-0.5" />
+                <div className="text-sm text-blue-800">
+                  <p className="font-medium">Password Requirements:</p>
+                  <ul className="list-disc list-inside mt-1 space-y-1">
+                    <li>At least 6 characters long</li>
+                    <li>Must be different from current password</li>
+                  </ul>
+                </div>
+              </div>
+            </div>
+
+            {/* Action Buttons */}
+            <div className="flex justify-end gap-3 pt-2">
+              <Button
+                type="button"
+                variant="outline"
+                onClick={onClose}
+              >
+                Cancel
+              </Button>
+              <Button
+                type="submit"
+                variant="primary"
+                isLoading={changePasswordMutation.isPending}
+              >
+                Change Password
+              </Button>
+            </div>
+          </form>
+        </div>
+      </Card>
+    </div>
+  );
+};

frontend/src/components/admin/index.ts

@@ -1,4 +1,5 @@
 export { AdminLayout } from './AdminLayout';
 export { AdminSidebar } from './AdminSidebar';
 export { AdminHeader } from './AdminHeader';
-export { ThemeCustomizer } from './ThemeCustomizer';
+export { ThemeCustomizer } from './ThemeCustomizer';
+export { PasswordChangeModal } from './PasswordChangeModal';

frontend/src/config/api.ts

@@ -7,7 +7,7 @@ export const GALLERY_TOKEN_KEY = 'gallery_token';
 
 // Create axios instance
 export const api = axios.create({
-  baseURL: import.meta.env.VITE_API_URL || 'http://localhost:3001',
+  baseURL: import.meta.env.VITE_API_URL || 'http://localhost:3002',
   headers: {
     'Content-Type': 'application/json',
   },

frontend/src/pages/admin/CreateEventPage.tsx

@@ -32,7 +32,6 @@ const EVENT_TYPES = [
   { value: 'wedding', label: 'Wedding', emoji: '💒' },
   { value: 'birthday', label: 'Birthday', emoji: '🎂' },
   { value: 'corporate', label: 'Corporate', emoji: '🏢' },
-  { value: 'party', label: 'Party', emoji: '🎉' },
   { value: 'other', label: 'Other', emoji: '📸' },
 ];
 
@@ -126,8 +125,6 @@ export const CreateEventPage: React.FC = () => {
       return;
     }
 
-    const expiresAt = addDays(new Date(), formData.expires_in_days);
-    
     createMutation.mutate({
       event_type: formData.event_type,
       event_name: formData.event_name,
@@ -135,9 +132,9 @@ export const CreateEventPage: React.FC = () => {
       host_email: formData.host_email,
       admin_email: formData.admin_email,
       password: formData.password,
-      welcome_message: formData.welcome_message || undefined,
+      welcome_message: formData.welcome_message || '',
       color_theme: formData.color_theme || undefined,
-      expires_at: expiresAt.toISOString(),
+      expiration_days: formData.expires_in_days,
     });
   };
 

frontend/src/pages/admin/EventDetailsPage.tsx

@@ -78,8 +78,7 @@ export const EventDetailsPage: React.FC = () => {
   // Extend expiration mutation
   const extendMutation = useMutation({
     mutationFn: (days: number) => {
-      const newDate = addDays(parseISO(event!.expires_at), days);
-      return eventsService.extendExpiration(parseInt(id!), newDate.toISOString());
+      return eventsService.extendExpiration(parseInt(id!), days);
     },
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ['admin-event', id] });

frontend/src/pages/admin/SettingsPage.tsx

@@ -84,18 +84,12 @@ export const SettingsPage: React.FC = () => {
   // Save mutations
   const saveGeneralMutation = useMutation({
     mutationFn: async () => {
-      // Save each setting
-      const promises = Object.entries(generalSettings).map(([key, value]) => 
-        fetch('/api/admin/settings/general', {
-          method: 'PUT',
-          headers: {
-            'Content-Type': 'application/json',
-            'Authorization': `Bearer ${localStorage.getItem('adminToken')}`
-          },
-          body: JSON.stringify({ [`general_${key}`]: value })
-        })
-      );
-      await Promise.all(promises);
+      // Convert to the format expected by the API
+      const settingsData: Record<string, any> = {};
+      Object.entries(generalSettings).forEach(([key, value]) => {
+        settingsData[`general_${key}`] = value;
+      });
+      return settingsService.updateSettings(settingsData);
     },
     onSuccess: () => {
       toast.success('General settings saved successfully');
@@ -108,18 +102,12 @@ export const SettingsPage: React.FC = () => {
 
   const saveSecurityMutation = useMutation({
     mutationFn: async () => {
-      // Save each setting
-      const promises = Object.entries(securitySettings).map(([key, value]) => 
-        fetch('/api/admin/settings/security', {
-          method: 'PUT',
-          headers: {
-            'Content-Type': 'application/json',
-            'Authorization': `Bearer ${localStorage.getItem('adminToken')}`
-          },
-          body: JSON.stringify({ [`security_${key}`]: value })
-        })
-      );
-      await Promise.all(promises);
+      // Convert to the format expected by the API
+      const settingsData: Record<string, any> = {};
+      Object.entries(securitySettings).forEach(([key, value]) => {
+        settingsData[`security_${key}`] = value;
+      });
+      return settingsService.updateSettings(settingsData);
     },
     onSuccess: () => {
       toast.success('Security settings saved successfully');

frontend/src/services/admin.service.ts

@@ -91,5 +91,10 @@ export const adminService = {
     const sizes = ['Bytes', 'KB', 'MB', 'GB', 'TB'];
     const i = Math.floor(Math.log(bytes) / Math.log(k));
     return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
+  },
+
+  // Change password
+  async changePassword(data: { currentPassword: string; newPassword: string }): Promise<void> {
+    await api.post('/api/admin/auth/change-password', data);
   }
 };

frontend/src/services/events.service.ts

@@ -10,10 +10,15 @@ interface CreateEventData {
   password: string;
   welcome_message?: string;
   color_theme?: string;
-  expires_at: string;
+  expiration_days: number;
 }
 
 interface UpdateEventData {
+  event_name?: string;
+  event_date?: string;
+  host_email?: string;
+  admin_email?: string;
+  password?: string;
   welcome_message?: string;
   color_theme?: string;
   expires_at?: string;
@@ -61,13 +66,13 @@ export const eventsService = {
 
   // Update event (admin)
   async updateEvent(id: number, data: UpdateEventData): Promise<Event> {
-    const response = await api.patch<Event>(`/api/admin/events/${id}`, data);
+    const response = await api.put<Event>(`/api/events/${id}`, data);
     return response.data;
   },
 
   // Delete/deactivate event (admin)
   async deleteEvent(id: number): Promise<void> {
-    await api.delete(`/api/admin/events/${id}`);
+    await api.delete(`/api/events/${id}`);
   },
 
   // Force archive event (admin)
@@ -76,9 +81,9 @@ export const eventsService = {
   },
 
   // Extend event expiration (admin)
-  async extendExpiration(id: number, newExpiryDate: string): Promise<Event> {
-    const response = await api.patch<Event>(`/api/admin/events/${id}`, {
-      expires_at: newExpiryDate,
+  async extendExpiration(id: number, days: number): Promise<Event> {
+    const response = await api.post<Event>(`/api/events/${id}/extend`, {
+      days,
     });
     return response.data;
   },