feat(auth): implement secure email verification and password reset flows#102
Merged
portableDD merged 2 commits intoNexacore-Org:mainfrom Jun 2, 2025
Conversation
portableDD
approved these changes
May 30, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
📌 Pull Request Title
Description
i implemented:
New Entities:
EmailVerification: Stores email verification tokens
PasswordReset: Stores password reset tokens
New DTOs:
VerifyEmailDto and RequestEmailVerificationDto
ForgotPasswordDto and ResetPasswordDto
New Service:
EmailService: Handles sending verification and reset emails
Enhanced AuthService with new methods:
requestEmailVerification: Generates and sends verification email
verifyEmail: Verifies email token
forgotPassword: Initiates password reset
resetPassword: Resets password with token
New Endpoints in AuthController:
POST /auth/request-verification: Request email verification
POST /auth/verify-email: Verify email with token
POST /auth/forgot-password: Request password reset
POST /auth/reset-password: Reset password with token
Security Features:
Token expiration handling
Token reuse prevention
Secure password hashing
Email verification status tracking
Rate limiting (through NestJS guards)
Related Issues
Changes Made
How to Test
Screenshots (if applicable)
Checklist