120 lines
3.7 KiB
JavaScript
120 lines
3.7 KiB
JavaScript
const express = require('express');
|
|
const crypto = require('crypto');
|
|
const joi = require('joi');
|
|
const nodeMail = require('nodemailer');
|
|
const bcrypt = require('bcrypt');
|
|
require('dotenv').config();
|
|
|
|
const PORT = process.env.PORT;
|
|
|
|
const transporter = nodeMail.createTransport({
|
|
service: 'gmail',
|
|
auth: {
|
|
user: process.env.EMAIL_USER,
|
|
pass: process.env.EMAIL_PASS,
|
|
}
|
|
});
|
|
|
|
module.exports = (users) => {
|
|
const router = express.Router();
|
|
|
|
router.post('/auth/resetPass', async (req, res) => {
|
|
const resetSchema = joi.object({
|
|
email: joi.string().email().required(),
|
|
});
|
|
req.session.error = '';
|
|
req.session.reset = '';
|
|
|
|
const valid = resetSchema.validate(req.body);
|
|
if (valid.error) {
|
|
req.session.error = 'invalid email';
|
|
return res.redirect('/forgotPassword')
|
|
}
|
|
const { email } = req.body;
|
|
const user = await users.findOne({ email });
|
|
|
|
if (!user) {
|
|
req.session.error = 'No user found'
|
|
return res.redirect('/forgotPassword');
|
|
}
|
|
|
|
const token = crypto.randomBytes(32).toString('hex');
|
|
console.log(`The reset token is ${token}`)
|
|
const expiration = Date.now() + 360000;
|
|
|
|
await users.updateOne({ email }, {
|
|
$set: { resetToken: token, resetTokenExpires: expiration }
|
|
});
|
|
|
|
const resetUrl = `http://localhost:${PORT}/reset/${token}`;
|
|
|
|
const mailSend = {
|
|
from: process.env.EMAIL_USER,
|
|
to: email,
|
|
subject: 'Password reset',
|
|
text: `reset your password here ${resetUrl} this link will expire within 1 hour`,
|
|
|
|
};
|
|
|
|
try {
|
|
await transporter.sendMail(mailSend);
|
|
req.session.reset = 'Reset link sent Check your email';
|
|
res.redirect('/forgotPassword');
|
|
} catch (err) {
|
|
console.log('there was an error', err);
|
|
res.status(500).send('email failed to send try again');
|
|
}
|
|
});
|
|
|
|
router.post('/resetLink', async (req, res) => {
|
|
const { token, password, confirmPassword, } = req.body;
|
|
const passwordSchema = joi.object({
|
|
password: joi.string().max(20).required(),
|
|
confirmPassword: joi.string().max(20).required(),
|
|
});
|
|
const valid = passwordSchema.validate({ password, confirmPassword });
|
|
if (valid.error) {
|
|
console.log("houston we have a problem"); // nice
|
|
req.session.error = 'Invalid input';
|
|
res.status(status.BadRequest);
|
|
return res.redirect(`/reset/${token}`);
|
|
}
|
|
if (!token || !password || !confirmPassword) {
|
|
req.session.error = 'field may be missing';
|
|
return res.redirect(`/reset/${token}`);
|
|
}
|
|
if (password !== confirmPassword) {
|
|
req.session.error = 'passwords do not match';
|
|
return res.redirect(`/reset/${token}`);
|
|
}
|
|
const user = await users.findOne({
|
|
resetToken: token,
|
|
resetTokenExpires: { $gt: Date.now() },
|
|
});
|
|
|
|
if (!user) {
|
|
req.session.error = 'Reset link is invalid.';
|
|
return res.redirect(`/reset`);
|
|
}
|
|
const hashPassword = await bcrypt.hash(password, 12);
|
|
|
|
await users.updateOne(
|
|
{
|
|
email: user.email
|
|
},
|
|
{
|
|
$set: {
|
|
password: hashPassword,
|
|
resetToken: '',
|
|
resetTokenExpires: 0,
|
|
},
|
|
}
|
|
);
|
|
req.session.success = 'Password has been reset';
|
|
res.redirect('/login');
|
|
});
|
|
|
|
return router;
|
|
}
|
|
|