diff --git a/frontend/src/pages/api/auth/request-password-reset.ts b/frontend/src/pages/api/auth/request-password-reset.ts index 19edf33..908e4a6 100644 --- a/frontend/src/pages/api/auth/request-password-reset.ts +++ b/frontend/src/pages/api/auth/request-password-reset.ts @@ -1,7 +1,11 @@ import type { APIRoute } from 'astro'; -import { pb } from '../../../lib/pb'; +import PocketBase from 'pocketbase'; import { sendEmail, getSiteUrl } from '../../../lib/email'; +const PB_POCKETBASE_URL = import.meta.env.PB_POCKETBASE_URL || 'https://avt-back.ru'; +const PB_ADMIN_EMAIL = import.meta.env.PB_ADMIN_EMAIL || 'redibedi2019@gmail.com'; +const PB_ADMIN_PASSWORD = import.meta.env.PB_ADMIN_PASSWORD || 'Stalin4444'; + const RATE_LIMIT_MAX_REQUESTS = 3; const RATE_LIMIT_WINDOW_MS = 60 * 60 * 1000; @@ -135,10 +139,13 @@ export const POST: APIRoute = async ({ request }) => { ); } - // Проверяем существует ли пользователь + // Проверяем существует ли пользователь (через админский доступ) let user = null; try { - user = await pb.collection('users').getFirstListItem(`email="${email}"`); + const pbAdmin = new PocketBase(PB_POCKETBASE_URL); + await pbAdmin.admins.authWithPassword(PB_ADMIN_EMAIL, PB_ADMIN_PASSWORD); + user = await pbAdmin.collection('users').getFirstListItem(`email="${email}"`); + console.log('User found:', user.id); } catch (e) { console.log('User not found, still return success'); }