Initial commit

rest/middlewares/password_reset.go

@@ -0,0 +1,58 @@
+package middlewares
+
+import (
+	"errors"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/sujit-baniya/fiber-boilerplate/utils"
+
+	"github.com/gofiber/fiber/v2"
+	"github.com/sujit-baniya/fiber-boilerplate/app"
+)
+
+func ValidatePasswordReset(c *fiber.Ctx) error {
+	token := c.Query("t")
+	err := _validatePasswordReset(c, token)
+	if err != nil {
+		return app.Http.Flash.WithError(c, fiber.Map{
+			"message": err.Error(),
+		}).Redirect("/token-vencido")
+	}
+	return c.Next()
+}
+
+func ValidatePasswordResetPost(c *fiber.Ctx) error {
+	token := c.Params("token")
+	err := _validatePasswordReset(c, token)
+	if err != nil {
+		return app.Http.Flash.WithError(c, fiber.Map{
+			"message": err.Error(),
+		}).Redirect("/login")
+	}
+	return c.Next()
+}
+
+func _validatePasswordReset(c *fiber.Ctx, t string) error {
+	t = utils.Decrypt(t, app.Http.Server.Key)
+	emailParts := strings.Split(t, "-reset-")
+	if len(emailParts) != 2 {
+		return errors.New("Invalid Password Reset Token")
+	}
+
+	tokenTS, err := strconv.ParseInt(emailParts[1], 10, 64)
+	if err != nil {
+		return errors.New("Invalid Password Reset Token")
+	}
+	now := time.Now().Unix()
+	diff := now - tokenTS
+	if diff > (5 * 60) {
+		return errors.New("Password Reset Token has expired!")
+	} else if diff < 0 {
+		return errors.New("Invalid Password Reset Token")
+	}
+	c.Locals("email", emailParts[0])
+	c.Locals("token", t)
+	return nil
+}