Implement password reset token validation logic and Interface

[zigzagdev]

Description

This pull request introduces the implementation of the PasswordResetTokenValidatorService, responsible for validating a password reset token by verifying:

• That both the user_id and token are present and non-empty
• That a matching record exists in the password_reset_requests table
• That the token was issued within the last 60 minutes (requested_at threshold)

The logic conforms to domain expectations by:

• Throwing InvalidArgumentException for missing or invalid input
• Encapsulating the DB validation logic within a private helper method isValidToken

The implementation adheres to the PasswordResetTokenValidatorInterface and is placed under the Infrastructure layer to isolate external dependencies (e.g., DB access).

[Copilot]

Pull Request Overview

Implements a service and interface for validating password reset tokens and adds a basic positive-path test.

• Introduces PasswordResetTokenValidatorService to enforce non-empty inputs and check token existence within a time window.
• Defines PasswordResetTokenValidatorInterface in the domain layer.
• Adds a positive-path integration test for a valid token.

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
src/app/User/Infrastructure/Service/PasswordResetTokenValidatorService.php	Implements the token validation logic against the database
src/app/User/Domain/Service/PasswordResetTokenValidatorInterface.php	Declares the validation interface
src/app/User/Infrastructure/InfrastructureTest/Service/PasswordResetTokenValidatorServiceTest.php	Adds a test for a valid reset token

Comments suppressed due to low confidence (2)

src/app/User/Infrastructure/Service/PasswordResetTokenValidatorService.php:1

• [nitpick] Consider adding a class-level docblock and method docblocks to explain the service’s responsibility and its public API for better maintainability.

<?php

src/app/User/Infrastructure/InfrastructureTest/Service/PasswordResetTokenValidatorServiceTest.php:66

• Add negative-path tests for empty inputs, non-existent tokens, and expired tokens to ensure all exception-throwing branches are covered.

    public function test_check_token_validate(): void