@loomcore/api 0.1.129 → 0.1.131

package/dist/controllers/auth.controller.js

@@ -74,9 +74,14 @@ export class AuthController {
     }
     async forgotPassword(req, res) {
         const email = req.body?.email;
+        let referer = req.get('referer') || req.headers.referer;
+        if (!referer) {
+            throw new BadRequestError('Missing required fields: referer is required.');
+        }
+        referer = referer.replace(/\/$/, '');
         const user = await this.authService.getUserByEmail(email);
         if (user) {
-            await this.authService.sendResetPasswordEmail(email);
+            await this.authService.sendResetPasswordEmail(email, referer);
         }
         apiUtils.apiResponse(res, 200);
     }

package/dist/services/auth.service.d.ts

@@ -34,7 +34,7 @@ export declare class AuthService extends MultiTenantApiService<IUser> {
     }>;
     getActiveRefreshToken(refreshToken: string, deviceId: string): Promise<IRefreshToken | null>;
     createNewRefreshToken(userId: AppIdType, deviceId: string, orgId?: AppIdType): Promise<IRefreshToken | null>;
-    sendResetPasswordEmail(emailAddress: string): Promise<void>;
+    sendResetPasswordEmail(emailAddress: string, clientBaseUrl: string): Promise<void>;
     resetPassword(email: string, passwordResetToken: string, password: string): Promise<UpdateResult>;
     deleteRefreshTokensForDevice(deviceId: string): Promise<import("../databases/models/delete-result.js").DeleteResult>;
     generateJwt(userContext: IUserContext): string;

package/dist/services/auth.service.js

@@ -193,15 +193,14 @@ export class AuthService extends MultiTenantApiService {
         const insertResult = await this.refreshTokenService.create(EmptyUserContext, newRefreshToken);
         return insertResult;
     }
-    async sendResetPasswordEmail(emailAddress) {
+    async sendResetPasswordEmail(emailAddress, clientBaseUrl) {
         const expiresOn = this.getExpiresOnFromMinutes(this.authConfig.passwordResetTokenExpirationInMinutes);
         const passwordResetToken = await this.passwordResetTokenService.createPasswordResetToken(emailAddress, expiresOn);
         if (!passwordResetToken) {
             throw new ServerError(`Failed to create password reset token for email: ${emailAddress}`);
         }
-        const httpOrHttps = config.env === 'local' ? 'http' : 'https';
         const urlEncodedEmail = encodeURIComponent(emailAddress);
-        const resetPasswordLink = `${httpOrHttps}://${config.network.hostName}${config.network.externalPort ? `:${config.network.externalPort}` : ''}/reset-password/${passwordResetToken.token}/${urlEncodedEmail}`;
+        const resetPasswordLink = `${clientBaseUrl}/reset-password/${passwordResetToken.token}/${urlEncodedEmail}`;
         await this.emailService.sendResetPasswordEmail(emailAddress, resetPasswordLink);
     }
     async resetPassword(email, passwordResetToken, password) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@loomcore/api",
-  "version": "0.1.129",
+  "version": "0.1.131",
   "private": false,
   "description": "Loom Core Api - An opinionated Node.js api using Typescript, Express, and MongoDb or PostgreSQL",
   "scripts": {
@@ -58,7 +58,7 @@
     "qs": "^6.15.0"
   },
   "peerDependencies": {
-    "@loomcore/common": "^0.0.63",
+    "@loomcore/common": "^0.0.64",
     "@sinclair/typebox": "0.34.33",
     "cookie-parser": "^1.4.6",
     "cors": "^2.8.5",