hngprojects / hng_boilerplate_nestjs

Description
Apache License 2.0
181 stars 105 forks source link

[FIX] [ANCHOR: BE PYTHON] Endpoint to Reset Password #948

Open hestherrh opened 2 months ago

hestherrh commented 2 months ago

Description

Create a backend endpoint that allows users to reset their password using a secure token received via email. The endpoint should validate the token, accept the new password, and update the user’s credentials in the database.

Acceptance Criteria

  1. Develop an endpoint that validates the reset token and accepts a new password.
  2. Ensure the new password meets security standards (e.g., complexity, length).
  3. Update the user’s password in the database securely.
  4. Invalidate the token after a successful password reset.
  5. Implement error handling for invalid or expired tokens.

Purpose

To provide users with a secure way to reset their passwords using a verification token.

Requirements

  1. Ensure secure password storage with proper hashing algorithms.
  2. Include comprehensive error handling for token validation and other edge cases.
  3. Perform thorough testing to ensure reliability and security.

Expected Outcome Users can successfully reset their password using a secure token, and the system updates their credentials securely.

hestherrh commented 2 months ago

@johnson.oragui@gmail.com