litlyx/dashboard/server/api/user/password/reset.ts

import crypto from 'crypto';
import { PasswordModel } from '@schema/PasswordSchema';
import EmailService from '@services/EmailService'

export default defineEventHandler(async event => {

    const { email } = await readBody(event);

    const target = await PasswordModel.findOne({ email });
    if (!target) return { error: true, message: 'Internal error. User not found.' }


    const newPass = crypto.randomBytes(5).toString('hex');

    const hash = crypto.createHash('sha256');
    const hashedPassword = hash.update(newPass + '_litlyx').digest('hex');

    target.password = hashedPassword;
    await target.save();

    await EmailService.sendResetPasswordEmail(email, newPass);
    
    return { error: false, message: 'Password changed' }

});