[Feature] Change email function

[dyzhuu]

User story:

This involves the frontend(s) and API creation

Description:

Acceptance Criteria:

• If OAuth & no password
  • Popup saying you need to create password
  • Message that linked OAuth accounts will be unlinked
  • Send email to user with reset password link (to create password)
• If has password
  • Confirm password
  • Change email with verification code (like in login screen)
• Redirect back to account page

• POST request at users/[id]/change-email
  • Takes the following payload

  password:
  newEmail:
  

  • Password must be verified against current hashed password with bcrypt
  • Email should not already exist
  • If successful
    • Create token (similar to api/auth/register/validate-email)
    • Send verification email to new email
• POST request at users/[id]/change-email/verify-token
  • Has the following payload:

  newEmail:
  token:
  

  • Verifies token
  • Verifies email does not already exist
  • Change email if successful

Definition of Done:

• AC met
• Applicable tests written
• Applicable documentation is written in GH wiki
• PR reviewed
• Merged into main/feature branch

Notes / Links