documenso/apps/web/pages/api/auth/reset-password.ts

import { NextApiRequest, NextApiResponse } from "next";
import { sendResetPassword } from "@documenso/lib/mail";
import { defaultHandler, defaultResponder } from "@documenso/lib/server";
import prisma from "@documenso/prisma";
import crypto from "crypto";

async function postHandler(req: NextApiRequest, res: NextApiResponse) {
  const { email } = req.body;
  const cleanEmail = email.toLowerCase();

  if (!cleanEmail || !cleanEmail.includes("@")) {
    res.status(422).json({ message: "Invalid email" });
    return;
  }

  const user = await prisma.user.findFirst({
    where: {
      email: cleanEmail,
    },
  });

  if (!user) {
    return res.status(400).json({ message: "No user found with this email." });
  }

  const token = crypto.randomBytes(64).toString("hex");

  const passwordResetToken = await prisma.passwordResetToken.create({
    data: {
      token,
      userId: user.id,
    },
  });

  await sendResetPassword(user, passwordResetToken.token);

  res.status(201).end();
}

export default defaultHandler({
  POST: Promise.resolve({ default: defaultResponder(postHandler) }),
});