#16 Implement Password reset

2 files changed, 64 insertions, 0 deletions

diff --git a/app/Controllers/Http/DashboardController.js b/app/Controllers/Http/DashboardController.js
index a47beb6..3de4816 100644
--- a/app/Controllers/Http/DashboardController.js
+++ b/app/Controllers/Http/DashboardController.js
@@ -5,6 +5,7 @@ const {
 
 const Service = use('App/Models/Service');
 const Workspace = use('App/Models/Workspace');
+const Persona = use('Persona');
 
 const crypto = require('crypto');
 const uuid = require('uuid/v4');
@@ -47,6 +48,66 @@ class DashboardController {
     return response.redirect('/user/account');
   }
 
+  async forgotPassword({
+    request,
+    view,
+  }) {
+    const validation = await validateAll(request.all(), {
+      mail: 'required|email',
+    });
+    if (validation.fails()) {
+      return view.render('others.message', {
+        heading: 'Cannot reset your password',
+        text: 'If your provided E-Mail address is linked to an account, we have just sent an E-Mail to that address.',
+      });
+    }
+    try {
+      await Persona.forgotPassword(request.input('mail'));
+    } catch(e) {}
+
+    return view.render('others.message', {
+      heading: 'Reset password',
+      text: 'If your provided E-Mail address is linked to an account, we have just sent an E-Mail to that address.',
+    });
+  }
+
+  async resetPassword({
+    request,
+    view,
+  }) {
+    const validation = await validateAll(request.all(), {
+      password: 'required',
+      password_confirmation: 'required',
+      token: 'required',
+    });
+    if (validation.fails()) {
+      session.withErrors({
+        type: 'danger',
+        message: 'Passwords do not match',
+      });
+      return response.redirect('back');
+    }
+
+    const payload = {
+      password: crypto.createHash('sha256').update(request.input('password')).digest('base64'),
+      password_confirmation: crypto.createHash('sha256').update(request.input('password_confirmation')).digest('base64'),
+    }
+
+    try {
+      await Persona.updatePasswordByToken(request.input('token'), payload);
+    } catch(e) {
+      return view.render('others.message', {
+        heading: 'Cannot reset your password',
+        text: 'Please make sure you are using a valid and recent link to reset your password and that your passwords entered match.',
+      });
+    }
+
+    return view.render('others.message', {
+      heading: 'Reset password',
+      text: 'Successfully reset your password. You can now login to your account using your new password.',
+    });
+  }
+
   async account({
     auth,
     view,
diff --git a/app/Models/Token.js b/app/Models/Token.js
index f6bec08..50bcf1d 100644
--- a/app/Models/Token.js
+++ b/app/Models/Token.js
@@ -3,6 +3,9 @@
 const Model = use('Model');
 
 class Token extends Model {
+  user() {
+    return this.belongsTo('App/Models/User')
+  }
 }
 
 module.exports = Token;