✨ Send password reset on register

Author: AnandChowdhary

package.json

@@ -1,6 +1,6 @@
 {
   "name": "staart",
-  "version": "1.0.39",
+  "version": "1.0.40",
   "main": "index.js",
   "repository": "git@github.com:AnandChowdhary/staart.git",
   "author": "Anand Chowdhary <mail@anandchowdhary.com>",

src/crud/email.ts

@@ -11,11 +11,11 @@ import { dateToDateTime } from "../helpers/utils";
 import { KeyValue } from "../interfaces/general";
 import { User } from "../interfaces/tables/user";
 import { getUser } from "./user";
-import { ErrorCode, Templates, CacheCategories } from "../interfaces/enum";
+import { ErrorCode, Templates } from "../interfaces/enum";
 import { emailVerificationToken } from "../helpers/jwt";
 import { mail } from "../helpers/mail";
 import { InsertResult } from "../interfaces/mysql";
-import { deleteItemFromCache, cachedQuery } from "../helpers/cache";
+import { sendNewPassword } from "../rest/auth";
 
 /**
  * Create a new email for a user
@@ -42,6 +42,8 @@ export const createEmail = async (
       email.email,
       await getUser(email.userId)
     );
+  } else {
+    await sendNewPassword(email.email);
   }
   return result;
 };

src/interfaces/enum.ts

@@ -91,6 +91,7 @@ export enum ErrorCode {
 export enum Templates {
   EMAIL_VERIFY = "email-verify",
   PASSWORD_RESET = "password-reset",
+  NEW_PASSWORD = "new-password",
   UNAPPROVED_LOCATION = "unapproved-location"
 }
 

src/rest/auth.ts

@@ -116,7 +116,7 @@ export const register = async (
         userId,
         email
       },
-      true,
+      !emailVerified,
       !!emailVerified
     );
     const emailId = newEmail.insertId;
@@ -133,19 +133,28 @@ export const register = async (
   return { created: true, userId };
 };
 
-export const sendPasswordReset = async (email: string, locals: Locals) => {
+export const sendPasswordReset = async (email: string, locals?: Locals) => {
   const user = await getUserByEmail(email);
   if (!user.id) throw new Error(ErrorCode.USER_NOT_FOUND);
   const token = await passwordResetToken(user.id);
   await mail(email, Templates.PASSWORD_RESET, { name: user.name, token });
-  await createEvent(
-    {
-      userId: user.id,
-      type: EventType.AUTH_PASSWORD_RESET_REQUESTED,
-      data: { token }
-    },
-    locals
-  );
+  if (locals)
+    await createEvent(
+      {
+        userId: user.id,
+        type: EventType.AUTH_PASSWORD_RESET_REQUESTED,
+        data: { token }
+      },
+      locals
+    );
+  return;
+};
+
+export const sendNewPassword = async (email: string) => {
+  const user = await getUserByEmail(email);
+  if (!user.id) throw new Error(ErrorCode.USER_NOT_FOUND);
+  const token = await passwordResetToken(user.id);
+  await mail(email, Templates.NEW_PASSWORD, { name: user.name, token });
   return;
 };
 
@@ -341,7 +350,7 @@ export const salesforce = new ClientOAuth2({
   redirectUri: redirectUri("salesforce"),
   authorizationUri: "https://login.salesforce.com/services/oauth2/authorize",
   accessTokenUri: "https://login.salesforce.com/services/oauth2/token",
-  scopes: ["email", "name"]
+  scopes: ["email"]
 });
 export const salesforceCallback = async (url: string, locals: Locals) => {
   const response = await salesforce.code.getToken(url);

src/templates/new-password.md

@@ -0,0 +1,11 @@
+# Set a password
+
+Dear {{name}},
+
+Click on the following button to set up a password for your new account:
+
+<a style="background: #555; padding: 1rem 2rem; font-size: 120%; color: #fff; display: inline-block; margin: 2rem auto; border-radius: 0.25rem" href="{{frontendUrl}}/auth/token?subject=password-reset&token={{token}}">Set a password</a>
+
+If the above link doesn't work, you can copy and paste this URL in your browser: {{frontendUrl}}/auth/token?subject=password-reset&token={{token}}.
+
+If you didn't request this email, you can safely ignore it.