// controllers/passwordreset.go func resetpassword(c *fiber.ctx) error {     type input struct {         otp         string `json:"otp"`         email       string `json:"email"`         newpassword string `json:"new_password"`     }      var input input      err := c.bodyparser(&input)     if err != nil {         return c.status(fiber.statusbadrequest).json(fiber.map{             "error": "invalid data",         })     }      // no input field should be empty     if input.otp == "" || input.email == "" || input.newpassword == "" {         return c.status(fiber.statusbadrequest).json(fiber.map{             "error": "invalid data",         })     }      // todo: check redis for otp and update password      return c.sendstatus(fiber.statusnocontent) } 

// routes/routes.go api.put("/reset-password", controllers.resetpassword) 

// utils/passwordreset.go func verifyotp(otp string, email string, c context.context) (error, bool) {     key := otpkeyprefix + email      // get the value for the key     value, err := config.redisclient.get(c, key).result()     if err != nil {         // the following states that the key was not found         if err == redis.nil {             return errors.new("otp expired / incorrect email"), false         }          // for other errors         return err, true     }      // compare received otp's hash with value in redis     err = bcrypt.comparehashandpassword([]byte(value), []byte(otp))     if err != nil {         return errors.new("incorrect otp"), false     }      // delete redis key to prevent abuse of otp     err = config.redisclient.del(c, key).err()     if err != nil {         return err, true     }      return nil, false }  func updatepassword(email string, password string, c context.context) error {     users := config.db.collection("users")      // hash the password     hashedpassword, _ := bcrypt.generatefrompassword([]byte(password), 10)      // update the password     update := bson.m{         "$set": bson.m{             "password": hashedpassword,         },     }     _, err := users.updatebyid(c, email, update)     if err != nil {         return err     }      return nil } 

// controllers/passwordreset.go func resetpassword(c *fiber.ctx) error {     type input struct {         otp         string `json:"otp"`         email       string `json:"email"`         newpassword string `json:"new_password"`     }      var input input      err := c.bodyparser(&input)     if err != nil {         return c.status(fiber.statusbadrequest).json(fiber.map{             "error": "invalid data",         })     }      // no input field should be empty     if input.otp == "" || input.email == "" || input.newpassword == "" {         return c.status(fiber.statusbadrequest).json(fiber.map{             "error": "invalid data",         })     }      // check redis for otp     err, isinternalerr := utils.verifyotp(input.otp, input.email, c.context())     if err != nil {         var code int         if isinternalerr {             code = fiber.statusinternalservererror         } else {             code = fiber.statusunauthorized         }          return c.status(code).json(fiber.map{             "error": err.error(),         })     }      err = utils.updatepassword(input.email, input.newpassword, c.context())     if err != nil {         return c.status(fiber.statusinternalservererror).json(fiber.map{             "error": err.error(),         })     }      return c.sendstatus(fiber.statusnocontent) } 

curl --location --request PUT 'localhost:3000/api/reset-password'  --header 'Content-Type: application/json'  --data-raw '{     "email": "yashjaiswal.cse@gmail.com",     "new_password": "tester123",     "otp": "DM4RDNF07B" }'