@igea/oac_backend 1.0.25 → 1.0.26

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igea/oac_backend",
-  "version": "1.0.25",
+  "version": "1.0.26",
   "description": "Backend service for the OAC project",
   "main": "src/index.js",
   "scripts": {
@@ -22,6 +22,7 @@
     "@igea/oac_jwt_helpers": "1.0.10",
     "axios": "1.10.0",
     "cookie-parser": "1.4.7",
+    "crypto": "1.0.1",
     "express": "5.1.0",
     "get-port": "7.1.0",
     "knex": "3.1.0",

package/src/config/development.json

@@ -21,5 +21,14 @@
 			"prefix": "diagnostica"
 		}
 	},
-	"jwt_secret": "@igea#"
+	"jwt_secret": "@igea#",
+	"smtp": {
+		"host": "smtp.aruba.it",
+		"port": 465,
+		"secure": true,
+		"auth": {
+			"user": "your_smtp_user",
+			"pass": "your_smtp_password"
+		}
+	}
 }

package/src/config/production.json

@@ -21,5 +21,14 @@
 			"prefix": "diagnostica"
 		}
 	},
-	"jwt_secret": "@igea#"
+	"jwt_secret": "@igea#",
+	"smtp": {
+		"host": "smtp.aruba.it",
+		"port": 465,
+		"secure": true,
+		"auth": {
+			"user": "your_smtp_user",
+			"pass": "your_smtp_password"
+		}
+	}
 }

package/src/controllers/users.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const router = express.Router();
 const Users = require('../models/users');
-
+const { randomUUID } = require('crypto');
 
 // Get all users
 router.get('/', async (req, res) => {
@@ -118,4 +118,21 @@ router.delete('/:id', async (req, res) => {
   })
 });
 
+router.get('/forget-password/:user_or_email', async (req, res) => {
+  const user_or_email = req.params.user_or_email;
+  const resetToken = randomUUID();
+  const resetLink = req.protocol + '://' + req.get('host') + '/frontend/reset-password?token=' + resetToken;
+  Users.sendResetPassword(user_or_email, resetToken, resetLink).then(() => {
+    res.json({
+      success: true,
+      message: ''
+    });
+  }).catch(err => {
+    res.status(500).json({
+      success: false,
+      message: `${err}`
+    });
+  });
+});
+
 module.exports = router;

package/src/models/users.js

@@ -1,3 +1,4 @@
+const nodemailer = require('nodemailer')
 const config = require('../config')
 const {db, schema } = require('./db')
 const table = `${schema}.users`
@@ -98,6 +99,49 @@ class Users {
         }); 
     }
 
+    static sendResetPassword(user_or_email, resetToken, resetLink) {
+        return new Promise(async (resolve, reject) => {
+            let user = null;
+            try {
+                user = await db(table)
+                    .where(function() {
+                        this.where('username', user_or_email)
+                            .orWhere('email', user_or_email);
+                    })
+                    .first();
+            } catch (e) {
+                return reject(e);
+            }
+            if(!user){
+                return resolve();
+            }
+
+            // TODO:
+            // Here we have to store the resetToken and expiration date (utc) 
+            // in the database associated with the user
+
+            // Send the email
+            try{
+                const smtpConfig = config.smtp;
+                let transporter = nodemailer.createTransport(smtpConfig);
+                let mailOptions = {
+                    from: smtpConfig.auth.user,
+                    to: user.email,
+                    subject: 'Password Reset',
+                    text: `Hello ${user.name},\n\nYou can reset your password using the following link:\n${resetLink}\n\nIf you did not request a password reset, please ignore this email.\n\nBest regards,\nYour Company`
+                };
+                transporter.sendMail(mailOptions, (error, info) => {
+                    if (error) {
+                        return reject(error);
+                    }
+                    resolve();
+                });
+            }catch(e){
+                reject(e)
+            }
+        });
+    }
+
 }
 
 module.exports = Users