在单击电子邮件链接后尝试重置密码时收到令牌已过期的错误。使用Node js、express和mongoose

// 导入所需的模块
const express = require('express');
const mongoose = require('mongoose');

// 创建Express应用
const app = express();

// 连接到MongoDB数据库
mongoose.connect('mongodb://localhost/myapp', { useNewUrlParser: true, useUnifiedTopology: true })
  .then(() => console.log('Connected to MongoDB'))
  .catch(err => console.error('Failed to connect to MongoDB', err));

// 定义用户模型
const User = mongoose.model('User', new mongoose.Schema({
  email: String,
  password: String,
  resetToken: String,
  resetTokenExpiration: Date
}));

// 处理重置密码请求
app.post('/reset-password', async (req, res) => {
  const { email, token, newPassword } = req.body;

  // 查找用户
  const user = await User.findOne({ email });

  // 验证令牌是否有效
  if (user.resetToken !== token || user.resetTokenExpiration < Date.now()) {
    return res.status(400).json({ error: 'Invalid or expired token' });
  }

  // 更新密码
  user.password = newPassword;
  user.resetToken = undefined;
  user.resetTokenExpiration = undefined;
  await user.save();

  // 返回成功响应
  res.json({ message: 'Password reset successfully' });
});

// 启动服务器
app.listen(3000, () => console.log('Server started on port 3000'));