password change via email & token possible

backend/videoflix/auth/views.py

@@ -27,7 +27,7 @@ class LoginView(APIView):
                 if not user.is_active:
                     return Response({'password': 'Account is inactive, please check your mails'}, status=status.HTTP_403_FORBIDDEN)
                 return self._create_token_response(user)
-            return Response({'detail': 'Unable to login with provided credentials.'}, status=status.HTTP_401_UNAUTHORIZED)
+            return Response({'mail': 'Unable to login with provided credentials.'}, status=status.HTTP_401_UNAUTHORIZED)
           
         return Response(serializer.errors, status=status.HTTP_400_BAD_REQUEST)
 
@@ -125,12 +125,15 @@ class ChangePasswordView(APIView):
     def post(self, request):
         email = request.data.get('email')
         token = request.data.get('token')
+        new_password = request.data.get('new_password')
 
         if not email or not token:
             return Response({"error": "Email and token are required."}, status=status.HTTP_400_BAD_REQUEST)
 
         user = CustomUser.objects.filter(Q(email=email) & Q(verify_email_token=token)).first()
         if user:
+            user.set_password(new_password)
+            user.save()
             return Response(status=status.HTTP_200_OK)
         else:
             return Response({"error": "Invalid email or token."}, status=status.HTTP_400_BAD_REQUEST)

backend/videoflix/videoflix/urls.py

@@ -17,7 +17,7 @@ Including another URLconf
 from django.contrib import admin
 from django.urls import path, include
 from users import views
-from auth.views import LoginView, RegisterView, VerifyEmailView, AuthView, ForgotPasswordView
+from auth.views import LoginView, RegisterView, VerifyEmailView, AuthView, ForgotPasswordView,ChangePasswordView
 
 urlpatterns = [
     path('admin/', admin.site.urls),
@@ -28,5 +28,6 @@ urlpatterns = [
     path('auth/register/', RegisterView.as_view()),
     path('auth/verify-email/', VerifyEmailView.as_view()),
     path('auth/forgot-password/', ForgotPasswordView.as_view()),
+    path('auth/change-password/', ChangePasswordView.as_view()),
         
 ]

frontend/src/app/components/auth/forgot-password/forgot-password.component.html

@@ -110,6 +110,11 @@
         passwordConfirm.touched) {
         <p>The passwords do not match</p>
         }
+        <div *ngIf="errorService.error$ | async as errors">
+          <div *ngIf="errors?.['error']" class="error-msg">
+            <p>{{ errors["error"] }}</p>
+          </div>
+        </div>
       </div>
       <app-btn-large
         [value]="'Update Password'"

frontend/src/app/components/auth/forgot-password/forgot-password.component.ts

@@ -56,9 +56,10 @@ export class ForgotPasswordComponent {
           ngForm.form.reset();
         } catch {}
       } else if (mailInput.name === 'password') {
-        ngForm.form.reset();
+        try {
-        this.queryEmail = false;
+          this.changePassword();
-        this.queryEmailSuccess = true;
+          ngForm.form.reset();
+        } catch {}
       }
     } else {
       mailInput.control.markAsTouched();
@@ -79,6 +80,24 @@ export class ForgotPasswordComponent {
     }
   }
 
+  async changePassword() {
+    const body = {
+      email: this.authData.mail,
+      token: this.authData.token,
+      new_password: this.authData.password,
+    };
+    console.log(body);
+
+    try {
+      await this.authService.changePassword(body);
+      this.queryEmail = false;
+      this.queryEmailSuccess = true;
+      this.errorService.clearError();
+    } catch (error) {
+      this.errorMsg(error);
+    }
+  }
+
   errorMsg(error: any) {
     if (error instanceof HttpErrorResponse) {
       const errorTypes = ['error'];

frontend/src/app/services/auth.service.ts

@@ -36,6 +36,12 @@ export class AuthService {
     );
   }
 
+  async changePassword(body: any) {
+    await lastValueFrom(
+      this.http.post(`${environment.baseUrl}/auth/change-password/`, body)
+    );
+  }
+
   storeAuthToken(data: any, storage: boolean) {
     storage
       ? localStorage.setItem('authToken', data.toString())