add forgot password functionality

lib/Biopay.pm

@@ -18,8 +18,8 @@ our $VERSION = '0.1';
 
 my %public_paths = (
     map { $_ => 1 }
-    qw( / /login /logout /terms /refunds /privacy ),
-    '/admin-login',
+    qw( / /login /logout /terms /refunds /privacy),
+    '/forgot-password', '/admin-login',
 );
 
 before sub {
@@ -144,7 +144,7 @@ post '/login' => sub {
 get '/set-password' => sub {
     my $user = param('username');
     unless ($user) {
-        return forward "/login";
+        return redirect "/login";
     }
     my $member = Biopay::Member->By_email($user);
     if ($member and !$member->password) {
@@ -633,4 +633,30 @@ get '/member/unpaid' => sub {
     };
 };
 
+get '/forgot-password' => sub {
+    debug session('message');
+    template 'forgot-password', {message => params->{message}};
+};
+post '/forgot-password' => sub {
+    my $email = params->{email};
+    unless ($email) {
+        return forward '/forgot-password', {
+            message => "Please enter your email address.",
+        }, {method => 'GET'};
+    }
+
+    my $m = Biopay::Member->By_email($email);
+    unless ($m) {
+        return forward '/forgot-password', {
+            message => "Sorry, a member with that email address cannot "
+                           . "be found.",
+        }, {method => 'GET'};
+    }
+
+    $m->send_set_password_email;
+    # Remember to save the hash
+    $m->save;
+    template 'forgot-password', { email_sent => 1 };
+};
+
 true;

lib/Biopay/Member.pm

@@ -188,6 +188,7 @@ method send_billing_error_email {
 }
 
 method send_set_password_email {
+    delete $self->{login_hash}; # Cause it to be re-created
     my $html = template 'email/set-password', {
         member => $self,
     }, { layout => 'email' };

views/forgot-password.tt

@@ -0,0 +1,27 @@
+<h1>Forgot your password?</h1>
+[% INCLUDE message.tt %]
+[% IF email_sent %]
+  <p>Done! Check your email for a link to reset your password.</p>
+[% ELSE %]
+<p>No problem.  Just enter in your email address and we will email you a link to reset it.</p>
+<form action="[% host %]/forgot-password" method="POST">
+<table class="forgot-password">
+  <tr>
+    <td>Email Address:</td>
+    <td><input id="email" type="text" name="email" size=20 /></td>
+  </tr>
+  <tr>
+    <td></td>
+    <td>
+      <input type="submit" value="Reset my password!" />
+    </td>
+</table>
+</form>
+</p>
+<script>
+   jQuery( function () {
+          $("#email").focus();
+     }
+   );
+</script>
+[% END %]