62 lines
1.8 KiB
Go
62 lines
1.8 KiB
Go
package resolvers
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"log"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/authorizerdev/authorizer/server/constants"
|
|
"github.com/authorizerdev/authorizer/server/db"
|
|
"github.com/authorizerdev/authorizer/server/email"
|
|
"github.com/authorizerdev/authorizer/server/envstore"
|
|
"github.com/authorizerdev/authorizer/server/graph/model"
|
|
"github.com/authorizerdev/authorizer/server/utils"
|
|
)
|
|
|
|
// ForgotPasswordResolver is a resolver for forgot password mutation
|
|
func ForgotPasswordResolver(ctx context.Context, params model.ForgotPasswordInput) (*model.Response, error) {
|
|
gc, err := utils.GinContextFromContext(ctx)
|
|
var res *model.Response
|
|
if err != nil {
|
|
return res, err
|
|
}
|
|
if envstore.EnvInMemoryStoreObj.GetEnvVariable(constants.EnvKeyDisableBasicAuthentication).(bool) {
|
|
return res, fmt.Errorf(`basic authentication is disabled for this instance`)
|
|
}
|
|
host := gc.Request.Host
|
|
params.Email = strings.ToLower(params.Email)
|
|
|
|
if !utils.IsValidEmail(params.Email) {
|
|
return res, fmt.Errorf("invalid email")
|
|
}
|
|
|
|
_, err = db.Mgr.GetUserByEmail(params.Email)
|
|
if err != nil {
|
|
return res, fmt.Errorf(`user with this email not found`)
|
|
}
|
|
|
|
token, err := utils.CreateVerificationToken(params.Email, constants.VerificationTypeForgotPassword)
|
|
if err != nil {
|
|
log.Println(`error generating token`, err)
|
|
}
|
|
db.Mgr.AddVerification(db.VerificationRequest{
|
|
Token: token,
|
|
Identifier: constants.VerificationTypeForgotPassword,
|
|
ExpiresAt: time.Now().Add(time.Minute * 30).Unix(),
|
|
Email: params.Email,
|
|
})
|
|
|
|
// exec it as go routin so that we can reduce the api latency
|
|
go func() {
|
|
email.SendForgotPasswordMail(params.Email, token, host)
|
|
}()
|
|
|
|
res = &model.Response{
|
|
Message: `Please check your inbox! We have sent a password reset link.`,
|
|
}
|
|
|
|
return res, nil
|
|
}
|