Feat: User Password Reset

[mukunzidd]

Description

As a user (vendor or buyer), I want to be able to reset my account password in case I forget it or need to change it for security reasons so that I can regain access to my account and maintain its security.

Acceptance Criteria

• Implement a password reset request API endpoint
• Validate the user's email or account identifier
• Generate and send a secure password reset token (e.g., via email)
• Implement a password reset confirmation API endpoint
• Validate the password reset token
• Update the user's password with a new, securely hashed password
• Implement appropriate error handling and responses
• Implement input sanitization

Related Issues

• #xx link any issues related to this

Definition of Done

• Password reset request API endpoint is implemented and functional
• User's email or account identifier is validated
• Secure password reset tokens are generated and sent (e.g., via email)
• Password reset confirmation API endpoint is implemented and functional
• Password reset tokens are validated
• User's password is updated with a new, securely hashed password
• Appropriate error handling and responses are implemented
• Input sanitization measures are in place
• Unit tests are written and passing
• Code adheres to coding standards and best practices
• All created endpoints are documented