Forget password by email Endpoint

[NghiaTranUIT]

Changelog

• Add POST /api/v1/users/request-reset-password to request a reset password email
• Send a email from thelab-rmit@outlook.com (temporary email) -Add POST /api/v1/user/reset-password to change the password

How to test

Request reset password email

curl --location --request POST 'localhost:5000/api/v1/users/request-reset-password' \
--header 'Content-Type: application/json' \
--data-raw '{
    "email": "your_real_email_in_database@gmail.com"
}'

• Verify you can receive an email from thelab-rmit@outlook.com
• Click on the link will open a FrontEnd page (It has not been implemented yet), so we should copy the href URL and get the userID and Token. e.g. http://localhost:3000/reset-password?id=612f2d876d222819d84aec37&token=5ef94f9f3b98af71ed7ff9f6b83e0f038726e96309db66e6e84708d12bcae308

Reset password

curl --location --request POST 'http://localhost:5000/api/v1/users/reset-password' \
--header 'Content-Type: application/json' \
--data-raw '{
    "userId": "xxx",
    "token": "xxx",
    "password": "newpassword"
}'

Fill the userId and token and verify the password is updated

[vercel[bot]]

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/further-web/cosc-2769-rmit/3mLeDzgj5JoiyJq9NAtYVT1acq4N
✅ Preview: https://cosc-2769-rmit-git-feat-forget-password-by-email-further-web.vercel.app

[NghiaTranUIT]

Thanks for your suggestion. I've updated it 👍

Changelog

• Add Token expiry to user schema
• Check if the token is expired
• Change the reset password URL to fit with the request from @8bitzz, who is responsible for the Front-End part

[NghiaTranUIT]

It's done 🙌

[8bitzz]

Thank you guys 👍