From a0eb707375db0b56c7592e07d7e25754e33dec92 Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 30 Mar 2022 18:21:52 +0200
Subject: [PATCH 1/5] change name of mutation which was wrongly called as query

---
 frontend/src/graphql/mutations.js | 6 ++++++
 frontend/src/graphql/queries.js   | 6 ------
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/frontend/src/graphql/mutations.js b/frontend/src/graphql/mutations.js
index 95c811f8d..3dbd8888e 100644
--- a/frontend/src/graphql/mutations.js
+++ b/frontend/src/graphql/mutations.js
@@ -18,6 +18,12 @@ export const setPassword = gql`
   }
 `
 
+export const forgotPassword = gql`
+  mutation($email: String!) {
+    forgotPassword(email: $email)
+  }
+`
+
 export const updateUserInfos = gql`
   mutation(
     $firstName: String
diff --git a/frontend/src/graphql/queries.js b/frontend/src/graphql/queries.js
index ecd8208b5..b8622ef2d 100644
--- a/frontend/src/graphql/queries.js
+++ b/frontend/src/graphql/queries.js
@@ -81,12 +81,6 @@ export const transactionsQuery = gql`
   }
 `
 
-export const sendResetPasswordEmail = gql`
-  query($email: String!) {
-    sendResetPasswordEmail(email: $email)
-  }
-`
-
 export const listGDTEntriesQuery = gql`
   query($currentPage: Int!, $pageSize: Int!) {
     listGDTEntries(currentPage: $currentPage, pageSize: $pageSize) {

From d4415ee256794552a2ff73e870f195e159a6d801 Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 30 Mar 2022 18:22:49 +0200
Subject: [PATCH 2/5] use renamed mutation instead of badly named query

---
 frontend/src/pages/ForgotPassword.spec.js | 2 +-
 frontend/src/pages/ForgotPassword.vue     | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/frontend/src/pages/ForgotPassword.spec.js b/frontend/src/pages/ForgotPassword.spec.js
index a547f9cc1..321f04913 100644
--- a/frontend/src/pages/ForgotPassword.spec.js
+++ b/frontend/src/pages/ForgotPassword.spec.js
@@ -21,7 +21,7 @@ const createMockObject = (comingFrom) => {
         push: mockRouterPush,
       },
       $apollo: {
-        query: mockAPIcall,
+        mutate: mockAPIcall,
       },
       $route: {
         params: {
diff --git a/frontend/src/pages/ForgotPassword.vue b/frontend/src/pages/ForgotPassword.vue
index 81121fbe7..510567703 100644
--- a/frontend/src/pages/ForgotPassword.vue
+++ b/frontend/src/pages/ForgotPassword.vue
@@ -39,7 +39,7 @@
   </div>
 </template>
 <script>
-import { sendResetPasswordEmail } from '@/graphql/queries'
+import { forgotPassword } from '@/graphql/mutations'
 import InputEmail from '@/components/Inputs/InputEmail'
 
 export default {
@@ -59,8 +59,8 @@ export default {
   methods: {
     async onSubmit() {
       this.$apollo
-        .query({
-          query: sendResetPasswordEmail,
+        .mutate({
+          mutation: forgotPassword,
           variables: {
             email: this.form.email,
           },

From 307831528621618cc648ddf247a7f3115b0594ac Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 30 Mar 2022 18:24:44 +0200
Subject: [PATCH 3/5] change name and tpye of query sendResetPasswordEmail to
 mutation forgotPassword. Do not throw when email is not found

---
 backend/src/graphql/resolver/UserResolver.ts | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/backend/src/graphql/resolver/UserResolver.ts b/backend/src/graphql/resolver/UserResolver.ts
index 49959e3e7..cacee6fc8 100644
--- a/backend/src/graphql/resolver/UserResolver.ts
+++ b/backend/src/graphql/resolver/UserResolver.ts
@@ -391,10 +391,11 @@ export class UserResolver {
   }
 
   @Authorized([RIGHTS.SEND_RESET_PASSWORD_EMAIL])
-  @Query(() => Boolean)
-  async sendResetPasswordEmail(@Arg('email') email: string): Promise<boolean> {
+  @Mutation(() => Boolean)
+  async forgotPassword(@Arg('email') email: string): Promise<boolean> {
     email = email.trim().toLowerCase()
-    const user = await DbUser.findOneOrFail({ email })
+    const user = await DbUser.findOne({ email })
+    if (!user) return true
 
     // can be both types: REGISTER and RESET_PASSWORD
     let optInCode = await LoginEmailOptIn.findOne({

From ef3420ef2ed2543ed693a750031bfee4b35b66a3 Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 30 Mar 2022 18:33:26 +0200
Subject: [PATCH 4/5] add standerd error message on fail for forgot password
 API call

---
 frontend/src/locales/de.json | 1 +
 frontend/src/locales/en.json | 1 +
 2 files changed, 2 insertions(+)

diff --git a/frontend/src/locales/de.json b/frontend/src/locales/de.json
index e8994a2e9..d204688db 100644
--- a/frontend/src/locales/de.json
+++ b/frontend/src/locales/de.json
@@ -30,6 +30,7 @@
   "delete": "Löschen",
   "em-dash": "—",
   "error": {
+    "email-already-sent": "Wir haben dir bereits eine E-Mail vor weniger als 10 Minuten geschickt.",
     "empty-transactionlist": "Es gab einen Fehler mit der Übermittlung der Anzahl deiner Transaktionen.",
     "error": "Fehler!",
     "no-account": "Leider konnten wir keinen Account mit diesen Daten finden.",
diff --git a/frontend/src/locales/en.json b/frontend/src/locales/en.json
index c586bbe46..dfe1c6d2b 100644
--- a/frontend/src/locales/en.json
+++ b/frontend/src/locales/en.json
@@ -30,6 +30,7 @@
   "delete": "Delete",
   "em-dash": "—",
   "error": {
+    "email-already-sent": "We already sent you an email less than 10 minutes ago.",
     "empty-transactionlist": "There was an error with the transmission of the number of your transactions.",
     "error": "Error!",
     "no-account": "Unfortunately we could not find an account to the given data!",

From 749b9c38c344b0d4b7ac11a0a7e20e6846a20864 Mon Sep 17 00:00:00 2001
From: Moriz Wahl <moriz.wahl@gmx.de>
Date: Wed, 30 Mar 2022 18:33:46 +0200
Subject: [PATCH 5/5] toast an error when forgot password fails

---
 frontend/src/pages/ForgotPassword.spec.js | 6 ++++++
 frontend/src/pages/ForgotPassword.vue     | 1 +
 2 files changed, 7 insertions(+)

diff --git a/frontend/src/pages/ForgotPassword.spec.js b/frontend/src/pages/ForgotPassword.spec.js
index 321f04913..dd703d7fc 100644
--- a/frontend/src/pages/ForgotPassword.spec.js
+++ b/frontend/src/pages/ForgotPassword.spec.js
@@ -2,6 +2,8 @@ import { mount, RouterLinkStub } from '@vue/test-utils'
 import flushPromises from 'flush-promises'
 import ForgotPassword from './ForgotPassword'
 
+import { toastErrorSpy } from '@test/testSetup'
+
 const mockAPIcall = jest.fn()
 
 const localVue = global.localVue
@@ -116,6 +118,10 @@ describe('ForgotPassword', () => {
               await flushPromises()
             })
 
+            it('toasts a standard error message', () => {
+              expect(toastErrorSpy).toBeCalledWith('error.email-already-sent')
+            })
+
             it('pushes to "/thx/forgotPassword"', () => {
               expect(mockAPIcall).toBeCalledWith(
                 expect.objectContaining({
diff --git a/frontend/src/pages/ForgotPassword.vue b/frontend/src/pages/ForgotPassword.vue
index 510567703..580a0ed97 100644
--- a/frontend/src/pages/ForgotPassword.vue
+++ b/frontend/src/pages/ForgotPassword.vue
@@ -69,6 +69,7 @@ export default {
           this.$router.push('/thx/forgotPassword')
         })
         .catch(() => {
+          this.toastError(this.$t('error.email-already-sent'))
           this.$router.push('/thx/forgotPassword')
         })
     },