User: use update function for password updates (#86419)

* Update password through Update function instead

* Remove duplicated to lower

* Refactor password code

pkg/api/utils.go

@@ -1,10 +1,16 @@
 package api
 
 import (
+	"context"
+	"errors"
+	"net/http"
 	"net/mail"
 
+	"github.com/grafana/grafana/pkg/api/response"
 	"github.com/grafana/grafana/pkg/middleware/cookies"
 	contextmodel "github.com/grafana/grafana/pkg/services/contexthandler/model"
+	"github.com/grafana/grafana/pkg/services/login"
+	"github.com/grafana/grafana/pkg/services/user"
 )
 
 func (hs *HTTPServer) GetRedirectURL(c *contextmodel.ReqContext) string {
@@ -20,6 +26,31 @@ func (hs *HTTPServer) GetRedirectURL(c *contextmodel.ReqContext) string {
 	return redirectURL
 }
 
+func (hs *HTTPServer) errOnExternalUser(ctx context.Context, userID int64) response.Response {
+	isExternal, err := hs.isExternalUser(ctx, userID)
+	if err != nil {
+		return response.Error(http.StatusInternalServerError, "Failed to validate User", err)
+	}
+	if isExternal {
+		return response.Error(http.StatusForbidden, "Cannot update external User", nil)
+	}
+	return nil
+}
+
+func (hs *HTTPServer) isExternalUser(ctx context.Context, userID int64) (bool, error) {
+	info, err := hs.authInfoService.GetAuthInfo(ctx, &login.GetAuthInfoQuery{UserId: userID})
+
+	if errors.Is(err, user.ErrUserNotFound) {
+		return false, nil
+	}
+
+	if err != nil {
+		return true, err
+	}
+
+	return login.IsProviderEnabled(hs.Cfg, info.AuthModule, hs.SocialService.GetOAuthInfoProvider(info.AuthModule)), nil
+}
+
 func ValidateAndNormalizeEmail(email string) (string, error) {
 	if email == "" {
 		return "", nil