The Password Reset Flow project is a full-stack authentication module designed to provide users with a secure and reliable way to manage their accounts. It includes user registration, login, forgot password, and password reset functionality with real-time email notifications powered by Nodemailer. This solution is built with Node.js + Express.js for backend and React.js for frontend. It exposes REST APIs for:

• Register (new user signup)
• Login (JWT-based authentication)
• Forgot Password (request reset link via email)
• Reset Password (set new password with token validation)

• ✅ User Registration with bcrypt password hashing.

• ✅ User Login with JWT authentication.

• ✅ Forgot Password endpoint to request reset link.

• ✅ Reset Password endpoint with secure token validation.

• ✅ Nodemailer integration for email notifications.

• ✅ MongoDB with Mongoose for persistence schema-based modeling.

• ✅Structured using the MVC architecture.

• ✅Input validation and error handling.

• ✅RESTful API design with clear endpoints.

• ✅API tested and documented via Postman.

• ✅Environment-based configuration.

• Node.js – JavaScript runtime environment.

• Express.js – Web Application framework for Node.js.

• MongoDB – NoSQL database for data storage.

• Mongoose – ODM for MongoDB.

• Postman – API testing and documentation.

• dotenv – For managing environment variables.

• JWT - For generating a Json Web Token(JWT) upon successful login.

• bcrypt - To hash(encrypt) & compare(decrypt) the password.

• Nodemailer - For email service.

• Passwords are hashed using bcrypt.

• Reset tokens are hashed in DB (never stored in plain text).

• Reset tokens expire in 1 hour.

• Old tokens are invalidated when a new reset is requested.

• express

• cors

• dotenv

• mongoose

• nodemon

• bcrypt

• jsonwebtoken

• nodemailer

• 401 Invalid Credentials ---> When user enters invalid password.

• 404 Not Found --–> When user not found.

• 409 Conflict Error ---> When user registers with same email for the second time.

• 500 Internal Server Error --–> For server-side issues.

• Validations are included to ensure data integrity (e.g., required fields, data types).

• API tested and documented via Postman.

• Documentation link: https://documenter.getpostman.com/view/44995020/2sB3BHmUWt

• Developed by: Vignesh R

• GitHub: @VigneshRav

• Email: vignesh212000@gmail.com