smtp integration and password recovery.
This commit is contained in:
60
map/app/controllers/passwordRecoveryController.js
Normal file
60
map/app/controllers/passwordRecoveryController.js
Normal file
@@ -0,0 +1,60 @@
|
||||
const nocodbService = require('../services/nocodb');
|
||||
const { sendPasswordRecovery } = require('../services/email');
|
||||
const logger = require('../utils/logger');
|
||||
|
||||
class PasswordRecoveryController {
|
||||
async requestPassword(req, res) {
|
||||
try {
|
||||
const { email } = req.body;
|
||||
|
||||
if (!email) {
|
||||
return res.status(400).json({
|
||||
success: false,
|
||||
error: 'Email address is required'
|
||||
});
|
||||
}
|
||||
|
||||
// Validate email format
|
||||
const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
|
||||
if (!emailRegex.test(email)) {
|
||||
return res.status(400).json({
|
||||
success: false,
|
||||
error: 'Invalid email format'
|
||||
});
|
||||
}
|
||||
|
||||
logger.info(`Password recovery requested for: ${email}`);
|
||||
|
||||
// Find user in database
|
||||
const user = await nocodbService.getUserByEmail(email);
|
||||
|
||||
if (!user) {
|
||||
// Don't reveal whether the email exists or not for security
|
||||
logger.warn(`Password recovery attempted for non-existent email: ${email}`);
|
||||
return res.json({
|
||||
success: true,
|
||||
message: 'If an account exists with this email, you will receive your password shortly.'
|
||||
});
|
||||
}
|
||||
|
||||
// Send password email
|
||||
await sendPasswordRecovery(user);
|
||||
|
||||
logger.info(`Password recovery email sent to: ${email}`);
|
||||
|
||||
res.json({
|
||||
success: true,
|
||||
message: 'If an account exists with this email, you will receive your password shortly.'
|
||||
});
|
||||
|
||||
} catch (error) {
|
||||
logger.error('Password recovery error:', error);
|
||||
res.status(500).json({
|
||||
success: false,
|
||||
error: 'Failed to process password recovery request. Please try again later.'
|
||||
});
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = new PasswordRecoveryController();
|
||||
Reference in New Issue
Block a user