Reset password via Services by email, and not by uid

Question

I'm trying to POST an email address to the password_reset Services endpoint so that it generates and sends a password reset email for a user. When I post the uid to the endpoint, it does this successfully. That said, I want to post the user's email to the endpoint (e.g. they type in their email to retrieve their password recovery email). How can I change the below in order to allow this? I tried changing user_load($uid) to user_load_by_mail($uid), but this didn't work.

Endpoint format:

mydomain.com/myendpoint/user/[email protected]/password_reset_email

user_resource.inc

  $definition = array(
  'user' => array(
  'operations' => array(
  'actions' => array( 
    'help' => 'Send forgot password email',
    'callback' => '_user_resource_password_reset_email',
    'access callback' => 'services_access_menu',
    'args' => array(
      array(
        'name' => 'email',
        'optional' => FALSE,
          'source' => array('data' => 'email'),
        'type' => 'string',
        'description' => 'The email address of the user whose password should be reset.',
      ),
      ),
    ),
    ),
    ),
  ),

       function _user_resource_password_reset_email($data) {
  global $language;


  $mail = _services_arg_value($data, 'data');
  $account = user_load_by_mail($mail);

  if (empty($account)) {
    return services_error(t('There is no user with email @email.', array('@email' => $mail)), 404);
  }

  // Mail one time login URL and instructions using current language.
  $mail = _user_mail_notify('password_reset_email', $account, $language);
  if (!empty($mail)) {
    watchdog('user', 'Password reset instructions mailed to %name at %email.', array('%name' => $account->name, '%email' => $account->mail));
  }
  else {
    watchdog('user', 'There was an error re-sending password reset instructions mailed to %name at %email', array('%name' => $account->name, '%email' => $account->mail));
}

  $result = "success";
  return $result;
}

Obj-C

ViewController.m

- (IBAction)sendButton:(id)sender {

[DIOSUser userSendPasswordRecoveryEmailWithEmailAddress:self.forgotField.text
                                                            success:^(AFHTTPRequestOperation *operation, id responseObject) {

                                                                NSLog(@"Password being sent!");

                                                                UIAlertView *alert = [[UIAlertView alloc] initWithTitle:@"Retrieving Password"
                                                                                                                message:@"We're helping you retrieve your password! Please check your email in a few minutes for a rescue link."
                                                                                                               delegate:self
                                                                                                      cancelButtonTitle:@"OK"
                                                                                                      otherButtonTitles:nil];
    [alert show];


      }failure:^( AFHTTPRequestOperation *operation , NSError *error ){

      if(!error){

     }
      }];


        }

DIOSUser.m

 + (void)userSendPasswordRecoveryEmailWithEmailAddress: (NSString*)email
                                              success:(void (^)(AFHTTPRequestOperation *operation, id responseObject)) success
                                              failure:(void (^)(AFHTTPRequestOperation *operation, NSError *error)) failure {

   NSString *path = [NSString stringWithFormat:@"user/%@/request_new_password", email];

    [[DIOSSession sharedSession] sendRequestWithPath:path method:@"POST" params:nil success:success failure:failure];
}

Answer 1

It would be better if this was externalised into a custom module instead of 'hacking' the services module.

This is fine on my system

$definition = array(
  'user' => array(
    'operations' => array(
       ...
       'actions' => array( 
          ...
         'password_reset_email' => array(
         'access callback' => 'services_access_menu',
         'callback' => '_user_resource_password_reset_email',
         'args' => array(
          array(
                'name' => 'email',
                'optional' => FALSE,
                'source' => array('data' => 'email'),
                'type' => 'string',
                'description' => 'The email of the user whose password to reset.',
        ),
    ),

Function is

function _user_resource_password_reset_email($data) {
  global $language;


  $mail = _services_arg_value($data, 'data');
  $account = user_load_by_mail($mail);

  if (empty($account)) {
    return services_error(t('There is no user with email @email.', array('@email' => $mail)), 404);
  }

  // Mail one time login URL and instructions using current language.
  $mail = _user_mail_notify('password_reset', $account, $language);
  if (!empty($mail)) {
    watchdog('user', 'Password reset instructions mailed to %name at %email.', array('%name' => $account->name, '%email' => $account->mail));
  }
  else {
    watchdog('user', 'There was an error re-sending password reset instructions mailed to %name at %email', array('%name' => $account->name, '%email' => $account->mail));
}

  $result = "success";
  return $result;
}

Answer 2

I Think this is existing in the services module, As per the below question and provided answer, you only need to send to the correct resource "?q=rest/user/request_new_password.json"

Below answer is copied

This feature was added with the resolution of this issue:

https://www.drupal.org/node/1303400 To use this resource, make a POST to:

?q=rest/user/request_new_password.json ...and send along a name

name=john ...or e-mail address:

[email protected]

You can see the original question and answer here:

Requesting a new password via services

I tested it with HTTPRequester Plugin with below JSON sample and it worked by posting to q=rest-mobile/user/request_new_password

But do not forget to activate this resource as in below screen shot

And this is a shot of how it is sent as JSON request

{"name":"user1"} or {"name":"[email protected]"}

Answer 3

Drupal 7

Since you have tagged 7 I presume you are working on Drupal 7. I remember having done something like this last year. If you are using hook_services_request_preprocess_alter() to alter the incoming parameters for your password reset request. You can use the hook to implement the following logic:

• Check if it is a password reset request;
• If it is a password reset request, then see if an email address has been passed as an argument. You can do this by checking if the argument is a number or if it is a string resembling an email with an @ sign, etc.
• If the argument is an email, then read the relevant user ID from the database and replace the argument with the user ID.

This should be a clean solution. I had done it this way for a project last year. Unfortunately, I do not have the code. Hope this algo helps.