password reset

be/routes/api.php

@@ -35,7 +35,7 @@ use Illuminate\Http\Request;
 |
 */
 
-Route::middleware(['auth:sanctum'])->group(function () {
+Route::middleware(['auth:sanctum', 'abilities:full-access'])->group(function () {
     Route::get('/user', function (Request $request) {
         return $request->user();
     });
@@ -105,10 +105,23 @@ Route::middleware(['auth:sanctum'])->group(function () {
     Route::put('/v1/users/{id}', UserController::class . '@update');
 });
 
+Route::middleware(['auth:sanctum', 'abilities:password-reset'])->group(function () {
+    Route::post('/v1/users/reset', UserController::class . '@resetPassword');
+});
+
+Route::post('/v1/users/forgot', UserController::class . '@sendPasswordResetLink');
+
+
 Route::post('/v1/tokens/create', function (Request $request) {
     $user = User::where('email', $request->all()['data']['email'])->first();
 
-    $token = $user->createToken($user->email . '-' . now());
+    if (!$user)
+        return response()->json(['message' => 'E-mail address doesnt exist.'], 401);
+
+    if (! Hash::check($request->all()['data']['password'], $user->password))
+        return response()->json(['message' => 'Incorrect password.'], 401);
+
+    $token = $user->createToken($user->email . '-' . now(), ['full-access']);
 
     return ['token' => $token->plainTextToken, 'user' => new UserResource($user)];
 });