Forgot Password and Reset Password 6 Digits Code

Community Guides
2

this is update in TS - BUT ITS NOT TESTED please let me know if it works :smiley:

import crypto from "crypto";
import _ from "lodash";
import utils, { yup, validateYupSchema } from "@strapi/utils";

const { getAbsoluteAdminUrl, getAbsoluteServerUrl, sanitize } = utils;

const forgotPasswordSchema = yup
  .object({
    email: yup.string().email().required(),
  })
  .noUnknown();

const sanitizeUser = (user: any, ctx: any) => {
  const { auth } = ctx.state;
  const userSchema = strapi.getModel("plugin::users-permissions.user");

  return sanitize.contentAPI.output(user, userSchema, { auth });
};

module.exports = (plugin: any) => {
  plugin.controllers.auth.forgotPasswordMobile = async (ctx: any) => {
    const { email: email } = await validateYupSchema(forgotPasswordSchema)(
      ctx.request.body
    );
    const pluginStore = strapi.store({
      type: "plugin",
      name: "users-permissions",
    });
    const emailSettings: any = await pluginStore.get({ key: "email" });
    const advancedSettings: any = await pluginStore.get({ key: "advanced" });

    // Find the user by email.
    const user = await strapi
      .query("plugin::users-permissions.user")
      .findOne({ where: { email: email.toLowerCase() } });

    if (!user || user.blocked) {
      return ctx.send({ ok: true });
    }
    console.log("start custom controller2");
    // Generate random token.
    const userInfo = await sanitizeUser(user, ctx);

    const resetPasswordToken = crypto.randomInt(100000, 999999).toString(); //crypto.randomBytes(3).toString("hex");

    const resetPasswordSettings: any = _.get(
      emailSettings,
      "reset_password.options",
      {}
    );

    const emailBody = await strapi
      .plugin("users-permissions")
      .service("users-permissions")
      .template(resetPasswordSettings.message, {
        URL: advancedSettings.email_reset_password,
        SERVER_URL: getAbsoluteServerUrl(strapi.config),
        ADMIN_URL: getAbsoluteAdminUrl(strapi.config),
        USER: userInfo,
        TOKEN: resetPasswordToken,
      });

    const emailObject = await strapi
      .plugin("users-permissions")
      .service("users-permissions")
      .template(resetPasswordSettings.object, {
        USER: userInfo,
      });

    const emailToSend = {
      to: user.email,
      from:
        resetPasswordSettings.from.email || resetPasswordSettings.from.name
          ? `${resetPasswordSettings.from.name} <${resetPasswordSettings.from.email}>`
          : undefined,
      replyTo: resetPasswordSettings.response_email,
      subject: emailObject,
      text: emailBody,
      html: emailBody,
    };

    // NOTE: Update the user before sending the email so an Admin can generate the link if the email fails
    await await strapi
      .plugin("users-permissions")
      .service("user")
      .edit(user.id, { resetPasswordToken });

    // Send an email to the user.
    await strapi.plugin("email").service("email").send(emailToSend);

    ctx.send({ ok: true });
  };

  plugin.routes["content-api"].routes.unshift({
    method: "POST",
    path: "/auth/forgot-password-mobile",
    handler: "auth.forgotPasswordMobile",
    config: {
      middlewares: ["plugin::users-permissions.rateLimit"],
      prefix: "",
    },
  });

  return plugin;
};
2 Likes