forgot.go

func (a *App) ForgotPassword(c echo.Context) (err error) {
	u := new(UserForgot)

	if err = c.Bind(u); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	if err = c.Validate(u); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	secretHash := computeSecretHash(a.AppClientSecret, u.Username, a.AppClientID)

	cognitoUser := &cognito.ForgotPasswordInput{
		SecretHash: aws.String(secretHash),
		ClientId:   aws.String(a.AppClientID),
		Username:   &u.Username,
	}

	cognitoUser.Validate()

	forgotPasswordOutput, err := a.CognitoClient.ForgotPassword(cognitoUser)

	if err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	return echo.NewHTTPError(http.StatusOK, forgotPasswordOutput)
}

func (a *App) ConfirmForgotPassword(c echo.Context, v validator.Validate) (err error) {

	u := new(UserConfirmationCode)

	if err = c.Bind(u); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	if err = c.Validate(u); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}
	if err = v.Struct(u.User); err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	secretHash := computeSecretHash(a.AppClientSecret, u.User.Username, a.AppClientID)

	cognitoUser := &cognito.ConfirmForgotPasswordInput{
		SecretHash:       aws.String(secretHash),
		ClientId:         aws.String(a.AppClientID),
		Username:         &u.User.Username,
		ConfirmationCode: &u.ConfirmationCode,
		Password:         &u.User.Password,
	}

	resp, err := a.CognitoClient.ConfirmForgotPassword(cognitoUser)
	if err != nil {
		return echo.NewHTTPError(http.StatusBadRequest, err.Error())
	}

	return echo.NewHTTPError(http.StatusOK, resp)
}