fix: forgotten password - extend reset token expire time (#1556)

* forgot password - set password expire after 12h

* set expire to 8h and add notification message in the email

Author: adrianboros

packages/wallet/backend/src/email/templates/forgotPassword.ts

@@ -39,6 +39,11 @@ export const getForgotPasswordEmailTemplate = (url: string): string => {
                     </a>
                   </td>
                 </tr>
+                <tr>
+                  <td>
+                    <p style="font-size:12px;line-height:24px;margin:10px 0 0px 0;color:#000">Password reset link will expire in 8 hours.</p>
+                  </td>
+                </tr>
                 <tr>
                   <td>
                     <p style="font-size:12px;line-height:24px;margin:16px 0 2px 0;color:#000">If you didn&#x27;t request this email, there&#x27;s nothing to worry about, you can safely ignore it.</p>

packages/wallet/backend/src/user/service.ts

@@ -73,7 +73,7 @@ export class UserService implements IUserService {
 
     const resetToken = getRandomToken()
     const passwordResetToken = hashToken(resetToken)
-    const passwordResetExpiresAt = new Date(Date.now() + 10 * 60 * 1000)
+    const passwordResetExpiresAt = new Date(Date.now() + 8 * 3600 * 1000)
 
     await User.query()
       .findById(user.id)