From ab7b5c0a97098a845a01d3b5086010707799c006 Mon Sep 17 00:00:00 2001
From: b1ek <me@blek.codes>
Date: Thu, 29 Aug 2024 20:36:47 +1000
Subject: [PATCH] feat: make reset password less secure and more convenient

---
 public/openapi.yml | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/public/openapi.yml b/public/openapi.yml
index be9201d..5eb790d 100644
--- a/public/openapi.yml
+++ b/public/openapi.yml
@@ -94,6 +94,8 @@ paths:
     post:
       tags:
         - Users
+      description: |-
+        I know its not secure because anyone can reset anyones password. But here's a counterpoint: its not required to be secure, and i dont care
       requestBody:
         content:
           application/json:
@@ -103,17 +105,13 @@ paths:
                 email:
                   type: string
                   example: 'jdoe@example.com'
+                new_pass:
+                  type: string
+                  example: 'very_strong_password123456'
       responses:
         200:
           description: |-
-            A reset password link is sent to the email, if such an account exists.
-            
-            If no mailer is set and it is debug mode, link will be available in `X-Reset-Link`
-        400:
-          description: |-
-            Invalid email
-            
-            This error also might be sent by laravel if your body is corrupted
+            The password is reset
     
   /api/users/private/list:
     get: