Password reset and new email validation ID stored in DB for more security

server/api/auth/register.post.ts

@@ -71,18 +71,27 @@ export default defineEventHandler(async (e): Promise<Return> => {
 
             db.insert(usersDataTable).values({ id: sql.placeholder('id') }).prepare().run({ id: id.id });
 
-            logSession(e, await setUserSession(e, { user: { id: id.id, username: body.data.username, email: body.data.email, state: 0, signin: new Date(), permissions: [] } }) as UserSessionRequired);
+            logSession(e, await setUserSession(e, { user: { id: id.id, username: body.data.username, email: body.data.email, state: 0, signin: new Date(), permissions: [], lastTimestamp: new Date(), logCount: 1 } }) as UserSessionRequired);
 
+            const emailId = Bun.hash('register' + id.id + hash, Date.now());
+            const timestamp = Date.now() + 1000 * 60 * 60;
+
+            await runTask('validation', {
+                payload: {
+                    type: 'validation',
+                    id: emailId, timestamp,
+                }
+            });
             await runTask('mail', {
                 payload: {
                     type: 'mail',
                     to: [body.data.email],
                     template: 'registration',
                     data: {
+                        id: emailId, timestamp,
+                        userId: id,
                         username: body.data.username,
-                        timestamp: Date.now(),
-                        id: id.id,
-                    }
+                    },
                 }
             });