1 files changed, 46 insertions, 0 deletions
diff --git a/code/api/src/Endpoints/Internal/PasswordResetRequests/CreateResetRequestRoute.cs b/code/api/src/Endpoints/Internal/PasswordResetRequests/CreateResetRequestRoute.cs
new file mode 100644
index 0000000..bb72d38
--- /dev/null
+++ b/code/api/src/Endpoints/Internal/PasswordResetRequests/CreateResetRequestRoute.cs
@@ -0,0 +1,46 @@
+namespace IOL.GreatOffice.Api.Endpoints.Internal.PasswordResetRequests;
+
+public class Route : RouteBaseAsync.WithRequest<CreateResetRequestPayload>.WithActionResult
+{
+    private readonly ILogger<Route> _logger;
+    private readonly PasswordResetService _passwordResetService;
+    private readonly MainAppDatabase _database;
+
+    public Route(ILogger<Route> logger, PasswordResetService passwordResetService, MainAppDatabase database) {
+        _logger = logger;
+        _passwordResetService = passwordResetService;
+        _database = database;
+    }
+
+    /// <summary>
+    /// Create a new password reset request.
+    /// </summary>
+    /// <param name="request"></param>
+    /// <param name="cancellationToken"></param>
+    /// <returns></returns>
+    [AllowAnonymous]
+    [HttpPost("~/_/password-reset-request/create")]
+    public override async Task<ActionResult> HandleAsync(CreateResetRequestPayload request, CancellationToken cancellationToken = default) {
+        if (!request.Username.IsValidEmailAddress()) {
+            _logger.LogInformation("Username is invalid, not doing request for password change");
+            return KnownProblem("Invalid email address", request.Username + " looks like an invalid email address");
+        }
+
+        var tz = GetRequestTimeZone(_logger);
+        _logger.LogInformation("Creating forgot password request with local date time: " + tz.LocalDateTime.ToString("u"));
+
+        try {
+            var user = _database.Users.SingleOrDefault(c => c.Username.Equals(request.Username));
+            if (user != default) {
+                await _passwordResetService.AddRequestAsync(user, tz.TimeZoneInfo, cancellationToken);
+                return Ok();
+            }
+
+            _logger.LogInformation("User was not found, not doing request for password change");
+            return Ok();
+        } catch (Exception e) {
+            _logger.LogError(e, "_/password-reset-request/create threw an exception");
+            return Ok();
+        }
+    }
+}
+\ No newline at end of file