[Feature] Change email function

[dyzhuu]

User story:

This involves the frontend(s) and API creation

Description:

Acceptance Criteria:

• If OAuth & no password

  • Popup saying you need to create password
  • Message that linked OAuth accounts will be unlinked
  • Send email to user with reset password link (to create password)

• If has password

  • Confirm password
  • Change email with verification code (like in login screen)

• Redirect back to account page

• [ ] POST request at users/[id]/change-email

  • [ ] Takes the following payload

    password:
    newEmail:

  • [ ] Password must be verified against current hashed password with bcrypt
  • [ ] Email should not already exist
  • [ ] If successful
  • [ ] Create token (similar to api/auth/register/validate-email)
  • [ ] Send verification email to new email

• [ ] POST request at users/[id]/change-email/verify-token

  • [ ] Has the following payload:

    newEmail:
    token:

  • [ ] Verifies token
  • [ ] Verifies email does not already exist
  • [ ] Change email if successful

Definition of Done:

• [ ] AC met
• [ ] Applicable tests written
• [ ] Applicable documentation is written in GH wiki
• [ ] PR reviewed
• [ ] Merged into main/feature branch

Notes / Links