function hashToken(token) return crypto.createHash('sha256').update(token).digest('hex');
validate();
document.getElementById('form').addEventListener('submit', async (e)=>{ e.preventDefault(); submit.disabled=true; const res = await fetch('/api/reset-password',method:'POST',headers:'content-type':'application/json',body:JSON.stringify(token, newPassword: pw.value)); const j = await res.json(); if (j.ok){ document.getElementById('status').textContent = 'Password updated. You can now sign in.'; document.getElementById('form').
// server.js const express = require('express'); const crypto = require('crypto'); const argon2 = require('argon2'); const bodyParser = require('body-parser'); const pool = require('./db'); // assume pg pool const rateLimit = require('express-rate-limit');
pw.addEventListener('input', check); pw2.addEventListener('input', check);
Image from: In Your Arms (2015)
Please check your email for new password and then log in here
