mirror of
https://github.com/LemmyNet/lemmy.git
synced 2024-06-08 16:39:22 +00:00
40 lines
1.4 KiB
Rust
40 lines
1.4 KiB
Rust
use crate::local_user::check_email_verified;
|
|
use actix_web::web::{Data, Json};
|
|
use lemmy_api_common::{
|
|
context::LemmyContext,
|
|
person::PasswordReset,
|
|
utils::send_password_reset_email,
|
|
SuccessResponse,
|
|
};
|
|
use lemmy_db_schema::source::password_reset_request::PasswordResetRequest;
|
|
use lemmy_db_views::structs::{LocalUserView, SiteView};
|
|
use lemmy_utils::error::{LemmyErrorExt, LemmyErrorType, LemmyResult};
|
|
|
|
#[tracing::instrument(skip(context))]
|
|
pub async fn reset_password(
|
|
data: Json<PasswordReset>,
|
|
context: Data<LemmyContext>,
|
|
) -> LemmyResult<Json<SuccessResponse>> {
|
|
// Fetch that email
|
|
let email = data.email.to_lowercase();
|
|
let local_user_view = LocalUserView::find_by_email(&mut context.pool(), &email)
|
|
.await
|
|
.with_lemmy_type(LemmyErrorType::IncorrectLogin)?;
|
|
|
|
// Check for too many attempts (to limit potential abuse)
|
|
let recent_resets_count = PasswordResetRequest::get_recent_password_resets_count(
|
|
&mut context.pool(),
|
|
local_user_view.local_user.id,
|
|
)
|
|
.await?;
|
|
if recent_resets_count >= 3 {
|
|
Err(LemmyErrorType::PasswordResetLimitReached)?
|
|
}
|
|
let site_view = SiteView::read_local(&mut context.pool()).await?;
|
|
check_email_verified(&local_user_view, &site_view)?;
|
|
|
|
// Email the pure token to the user.
|
|
send_password_reset_email(&local_user_view, &mut context.pool(), context.settings()).await?;
|
|
Ok(Json(SuccessResponse::default()))
|
|
}
|