refactor: change exceptions to more specific

src/application/commands/forgot_password_complete.py

@@ -1,6 +1,6 @@
 from src.application.abstractions import IUnitOfWork
 from src.application.contracts import IHashService, ILogger, ICache
-from src.application.domain.exceptions import ApplicationException
+from src.application.domain.exceptions import BadRequestException
 from src.infrastructure.database.decorators import transactional
 
 
@@ -38,33 +38,33 @@ class ForgotPasswordCompleteCommand:
 
         if new_password != confirm_password:
             self._logger.info('Forgot password failed: passwords do not match')
-            raise ApplicationException(400, 'Passwords do not match')
+            raise BadRequestException(message='Passwords do not match')
 
         code_key = f'{CODE_PREFIX}{code}'
         cached_email = await self._cache.get(code_key)
         if not cached_email:
             self._logger.info('Forgot password failed: code not found')
-            raise ApplicationException(400, 'Invalid or expired code')
+            raise BadRequestException(message='Invalid or expired code')
 
         if cached_email != normalized:
             self._logger.info('Forgot password failed: code-email mismatch')
-            raise ApplicationException(400, 'Invalid or expired code')
+            raise BadRequestException(message='Invalid or expired code')
 
         email_key = f'{EMAIL_PREFIX}{normalized}'
         code_hash = await self._cache.get(email_key)
         if not code_hash:
             self._logger.info('Forgot password failed: email key missing')
-            raise ApplicationException(400, 'Invalid or expired code')
+            raise BadRequestException(message='Invalid or expired code')
 
         ok = await self._hash_service.verify(hashed_value=code_hash, plain_value=code)
         if not ok:
             self._logger.info('Forgot password failed: code hash mismatch')
-            raise ApplicationException(400, 'Invalid or expired code')
+            raise BadRequestException(message='Invalid or expired code')
 
         user = await self._unit_of_work.user_repository.get_user_by_email(normalized)
         if user is None:
             self._logger.info('Forgot password failed: user not found after valid code')
-            raise ApplicationException(400, 'Invalid or expired code')
+            raise BadRequestException(message='Invalid or expired code')
 
         new_password_hash = await self._hash_service.hash(new_password)
         user = await self._unit_of_work.user_repository.set_password(