import { NextRequest, NextResponse } from "next/server"; import nodemailer from "nodemailer"; import db from "@/lib/db"; import { getLogger } from "@/utils/logger"; import { encryptUUID } from "@/utils/crypto/cryptography"; const logger = getLogger("api/mailConfirmation"); export async function POST(request: NextRequest) { try { const { email } = await request.json(); const existingUser = await db.user.findUnique({ where: { email }, }); if (!existingUser) { logger.warn("No user found with this email", { email }); return NextResponse.json({ message: "Not found" }, { status: 404 }); } const transporter = nodemailer.createTransport({ host: process.env.CPANEL_MAIL, port: 465, secure: true, auth: { user: process.env.CPANEL_USERNAME, pass: process.env.CPANEL_MAIL_PASSWORD, }, tls: { rejectUnauthorized: false, // for local testing (self-signed certs) }, }); await transporter.verify().then(() => { console.log("SMTP server is ready to take messages"); }).catch((err) => { console.error("SMTP connection failed:", err.message); }); const token = encryptUUID(existingUser.uuid) const resetLink = `${process.env.ROOTURl}/login/resetPassword/${token}` const mailOptions = { from: `"Barrack Store" <${process.env.CPANEL_MAIL_FROM}>`, to: email, subject: "Reset your Barrack Store password", html: ` Password Reset

Barrack Store

Secure Password Reset

Hello,

We received a request to reset the password for your Barrack Store account associated with:

${email}

Click the button below to create a new password.

Reset Password

If the button above doesn't work, copy and paste this link into your browser:

${resetLink}

Security Notice

If you did not request a password reset, you can safely ignore this email. Your password will remain unchanged.

Barrack Store Team

This is an automated email. Please do not reply.

© ${new Date().getFullYear()} Barrack Store. All rights reserved.

`, }; const info = await transporter.sendMail(mailOptions); logger.info("Email sent successfully to reset the password!", { response: info.response }); return NextResponse.json({ message: "Email sent successfully to reset the password!" }); } catch (error: any) { logger.error("Error occurred while sending mail", { message: error.message }); return new NextResponse("Internal Server Error", { status: 500 }); } }