No Password Reset Functionality

[devprashant19]

Component: Node.js Backend / Authentication Flow
Files Affected: backend/controllers/authController.js, backend/routes/authRoutes.js

Description

The authentication system currently handles user registration, local login, and Google OAuth login. However, there is no implementation for a "Forgot Password" flow. If a user registers via email/password and forgets their credentials, there is no route to request a reset link and no mechanism to change the password, resulting in a permanent account lockout.

Proposed Fix

1. Create a /forgot-password route that accepts an email, generates a time-limited reset JWT, stores it, and emails a reset link to the user (e.g., using nodemailer).
2. Create a /reset-password route that validates the reset token and safely updates the password field in MongoDB using the existing bcrypt schema hooks.

[github-actions]

👋 Welcome back! Thanks for your continued contribution. Your issue/PR is received and waiting for maintainer review.

[github-actions]

The issue highlights the lack of a "Forgot Password" feature in the authentication system of a Node.js backend. This absence leads to users being permanently locked out if they forget their credentials. The proposed solution involves adding routes for password reset: one to send a reset link via email using a JWT and another to validate the token and allow secure password updates.

[devprashant19]

@Userunknown84 I would like to work on the issue, please assign me