Method handleResetRequest

src/Routers/UsersRouter.js:547–630

(req)

  }

  async handleResetRequest(req) {
    this._throwOnBadEmailConfig(req);

    let email = req.body?.email;
    const token = req.body?.token;

    if (!email && !token) {
      throw new Parse.Error(Parse.Error.EMAIL_MISSING, 'you must provide an email');
    }

    if (token && typeof token !== 'string') {
      throw new Parse.Error(Parse.Error.INVALID_VALUE, 'token must be a string');
    }

    let userResults = null;
    let userData = null;

    // We can find the user using token
    if (token) {
      userResults = await req.config.database.find('_User', {
        _perishable_token: token,
        _perishable_token_expires_at: { $lt: Parse._encode(new Date()) },
      });
      if (userResults?.length > 0) {
        userData = userResults[0];
        if (userData.email) {
          email = userData.email;
        }
      }
    // Or using email if no token provided
    } else if (typeof email === 'string') {
      userResults = await req.config.database.find(
        '_User',
        { $or: [{ email }, { username: email, email: { $exists: false } }] },
        { limit: 1 },
        Auth.maintenance(req.config)
      );
      if (userResults?.length > 0) {
        userData = userResults[0];
      }
    }

    if (typeof email !== 'string') {
      throw new Parse.Error(
        Parse.Error.INVALID_EMAIL_ADDRESS,
        'you must provide a valid email string'
      );
    }

    if (userData) {
      this._sanitizeAuthData(userData);
      // Get files attached to user
      await req.config.filesController.expandFilesInObject(req.config, userData);

      const user = inflate('_User', userData);

      await maybeRunTrigger(
        TriggerTypes.beforePasswordResetRequest,