You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Implement password reset flow with email-based token delivery inside backend/contrib/.
Location
All work must be inside backend/contrib/src/auth/ and backend/contrib/src/mail/.
Acceptance Criteria
POST /auth/forgot-password — accepts { email }, generates a short-lived token (15 min), stores hashed token in DB, sends email with reset link via nodemailer
Overview
Implement password reset flow with email-based token delivery inside
backend/contrib/.Location
All work must be inside
backend/contrib/src/auth/andbackend/contrib/src/mail/.Acceptance Criteria
POST /auth/forgot-password— accepts{ email }, generates a short-lived token (15 min), stores hashed token in DB, sends email with reset link vianodemailerPOST /auth/reset-password— accepts{ token, newPassword }, validates token, updates password, invalidates tokenPasswordResetTokenentity:id,userId,tokenHash,expiresAt,usedAtMailModuleandMailServicecreated usingnodemailerMAIL_HOST,MAIL_PORT,MAIL_USER,MAIL_PASS,MAIL_FROM