This PR introduces a new password reset flow changes include:
Password Reset Initiation: Added a POST endpoint /users/resetPassword. This endpoint validates user emails and generates a time-limited hashed token for password resets.
Email Integration: Incorporated dependency injection for the email service to send password reset links with the unhashed token.
Password Reset Completion: Established a new POST endpoint /users/newPassword for finalizing the password reset. This endpoint validates the token, checks its expiration, and updates the password securely.
Any suggestions are more than welcome, thanks in advance!
This PR introduces a new password reset flow changes include:
Password Reset Initiation: Added a POST endpoint
/users/resetPassword
. This endpoint validates user emails and generates a time-limited hashed token for password resets.Email Integration: Incorporated dependency injection for the email service to send password reset links with the unhashed token.
Password Reset Completion: Established a new POST endpoint
/users/newPassword
for finalizing the password reset. This endpoint validates the token, checks its expiration, and updates the password securely.Any suggestions are more than welcome, thanks in advance!