Forgot password

[jonatasoli]

As a registered user, I want to be able to recover my account password by requesting a password reset link sent to my registered email, so that I can regain access to my account if I forget my credentials. The system should generate a secure, time-limited token and include it in the email, allowing me to safely set a new password without exposing my account to unauthorized access.

The password recovery process should validate that the email exists in the system and provide consistent responses regardless of whether the account is present, to prevent information leakage. Once the user clicks the reset link and submits a new password, the system must validate its strength, hash it securely, and update the account. Additionally, any active sessions or tokens should optionally be invalidated to ensure that the account remains secure after the reset.

[aritracodes-69]

I would love to contribute

[jonatasoli]

This issue depends on the conclusive issue of the email sent to you, if you are interested in the CLI process then reset it

[jonatasoli]

@aritracodes-69 this issue is good to starting
#18