110 lines
3.7 KiB
JavaScript
110 lines
3.7 KiB
JavaScript
const connection = require('../database/mySQL');
|
|
const { isEmpty } = require('../utils/object_isEmpty');
|
|
const AppError = require('../utils/error');
|
|
const bcrypt = require('bcryptjs');
|
|
const {FORGOT_PASSWORD_MODEL, RESET_PASSWORD_MODEL } = require('../database/model/userModel');
|
|
const nodemailer = require('nodemailer');
|
|
|
|
exports.user_forgotPassword = (req, res, next) => {
|
|
|
|
//Check the form data is found or not
|
|
if (isEmpty(req.body)) return next(new AppError('form data not found', 400));
|
|
|
|
try {
|
|
|
|
//Check the form data is valid or not
|
|
const { error } = FORGOT_PASSWORD_MODEL.validate(req.body);
|
|
|
|
if (error) return next(new AppError(error.details[0].message, 400));
|
|
|
|
connection.query("SELECT * FROM user WHERE email = ?", [[req.body.email]], async (err, data1, fields) => {
|
|
if (err) return next(new AppError(err, 500));
|
|
|
|
if (data1.length == 0) {
|
|
return next(new AppError("user not exist", 400))
|
|
}
|
|
|
|
const otp = Math.floor(1000 + Math.random() * 9000);
|
|
|
|
const otpExpier = new Date();
|
|
otpExpier.setMinutes(otpExpier.getMinutes() + 1);
|
|
|
|
connection.query("UPDATE user SET otp = ?, otpExpire = ? WHERE email = ?", [otp, otpExpier, req.body.email], (err, data2, fields) => {
|
|
if (err) return next(new AppError(err, 500));
|
|
|
|
const transporter = nodemailer.createTransport({
|
|
service: 'Gmail',
|
|
auth: {
|
|
user: 'ecosavertp@gmail.com',
|
|
pass: 'Ecosaver1234!',
|
|
},
|
|
});
|
|
|
|
const mailOptions = {
|
|
from: 'ecosavertp@gmail.com',
|
|
to: req.body.email,
|
|
subject: 'Password reset OTP',
|
|
text: `Your OTP (It is expired after 1 min) : ${otp}`,
|
|
};
|
|
|
|
transporter.sendMail(mailOptions, (error, info) => {
|
|
if (error) {
|
|
return next(new AppError(error, 500));
|
|
} else {
|
|
res.json({
|
|
data: "Your OTP send to the email"
|
|
})
|
|
}
|
|
});
|
|
|
|
})
|
|
|
|
})
|
|
|
|
}
|
|
catch (err) {
|
|
return next(new AppError(err, 500));
|
|
}
|
|
}
|
|
|
|
exports.user_resetPassword = (req, res, next) => {
|
|
|
|
const body = req.body;
|
|
const password = body.password;
|
|
const confirmPassword = body.confirmPassword;
|
|
|
|
if (isEmpty(body)) return next(new AppError('form data not found', 400));
|
|
|
|
try {
|
|
|
|
const { error } = RESET_PASSWORD_MODEL.validate(body);
|
|
|
|
if (error) return next(new AppError(error.details[0].message, 400));
|
|
|
|
if (password.localeCompare(confirmPassword) != 0) return next(new AppError('passwords are not equal', 400));
|
|
|
|
connection.query("SELECT * FROM user WHERE otp = ? AND otpExpire > NOW()", [[body.otp]], async (err, data, fields) => {
|
|
if (err) return next(new AppError(err, 500));
|
|
|
|
if (data.length == 0) return next(new AppError('Invalid or expired OTP', 400));
|
|
|
|
const solt = await bcrypt.genSalt(10);
|
|
const hashedPassword = await bcrypt.hash(password, solt);
|
|
|
|
connection.query("UPDATE user SET password = ?, otp = null, otpExpire = null WHERE otp = ?", [hashedPassword, body.otp], async (err, data, fields) => {
|
|
if (err) return next(new AppError(err, 500));
|
|
|
|
res.json({
|
|
data: 'Password reset successful'
|
|
})
|
|
|
|
})
|
|
|
|
})
|
|
|
|
}
|
|
catch (err) {
|
|
return next(new AppError(err, 500));
|
|
}
|
|
|
|
} |