New End Point

Implements the password reset workflow.

• api/password/forget -> generates a new token and sets expiry and sends the user an email by visiting which he can reset his passwrod
• api/password/reset -> takes new password and check if token is valid and updates the password.

api/password/forget

{
    "email": "[email protected]"
}

api/password/reset

{
    "email": "[email protected]",
    "token": "token viz send to users email",
    "password": "new password"
}

Changes

1. Added new field in the user model named resetInfo

   •  "token": "token viz used for verification",
      "expiry": "date obj which tells when this token is expired"

2. New file routes/reset.js viz contains two routes
   • /forget
   • /reset
3. Updated doc
4. Added new package crypto viz used to generate new token refer line 44 in routes/reset.js
5. Added new package nodemailer viz used for sending emails.