{
  "name": "Reset User Password",
  "active": false,
  "nodes": [
    {
      "id": "check_permission",
      "name": "Check Permission",
      "type": "metabuilder.condition",
      "typeVersion": 1,
      "position": [
        100,
        100
      ],
      "parameters": {
        "condition": "{{ $context.user.level >= 3 }}",
        "operation": "condition"
      }
    },
    {
      "id": "fetch_user",
      "name": "Fetch User",
      "type": "metabuilder.database",
      "typeVersion": 1,
      "position": [
        400,
        100
      ],
      "parameters": {
        "filter": {
          "id": "{{ $json.userId }}",
          "tenantId": "{{ $context.tenantId }}"
        },
        "operation": "database_read",
        "entity": "User"
      }
    },
    {
      "id": "generate_temp_password",
      "name": "Generate Temp Password",
      "type": "metabuilder.operation",
      "typeVersion": 1,
      "position": [
        700,
        100
      ],
      "parameters": {
        "operation": "generate_random_token",
        "length": 16
      }
    },
    {
      "id": "hash_password",
      "name": "Hash Password",
      "type": "metabuilder.operation",
      "typeVersion": 1,
      "position": [
        100,
        300
      ],
      "parameters": {
        "input": "{{ $steps.generate_temp_password.output }}",
        "operation": "bcrypt_hash",
        "rounds": 12
      }
    },
    {
      "id": "update_user",
      "name": "Update User",
      "type": "metabuilder.database",
      "typeVersion": 1,
      "position": [
        400,
        300
      ],
      "parameters": {
        "filter": {
          "id": "{{ $json.userId }}"
        },
        "data": {
          "passwordHash": "{{ $steps.hash_password.output }}",
          "firstLogin": true,
          "passwordChangedAt": null
        },
        "operation": "database_update",
        "entity": "User"
      }
    },
    {
      "id": "send_reset_email",
      "name": "Send Reset Email",
      "type": "metabuilder.operation",
      "typeVersion": 1,
      "position": [
        700,
        300
      ],
      "parameters": {
        "data": {
          "tempPassword": "{{ $steps.generate_temp_password.output }}"
        },
        "operation": "email_send",
        "to": "{{ $steps.fetch_user.output.email }}",
        "subject": "Your password has been reset",
        "template": "password_reset_admin"
      }
    },
    {
      "id": "return_success",
      "name": "Return Success",
      "type": "metabuilder.action",
      "typeVersion": 1,
      "position": [
        100,
        500
      ],
      "parameters": {
        "action": "http_response",
        "status": 200,
        "body": {
          "message": "Password reset. Temporary password sent to user email"
        }
      }
    }
  ],
  "connections": {
    "check_permission": {
      "main": [
        [
          {
            "node": "fetch_user",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "fetch_user": {
      "main": [
        [
          {
            "node": "generate_temp_password",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "generate_temp_password": {
      "main": [
        [
          {
            "node": "hash_password",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "hash_password": {
      "main": [
        [
          {
            "node": "update_user",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "update_user": {
      "main": [
        [
          {
            "node": "send_reset_email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "send_reset_email": {
      "main": [
        [
          {
            "node": "return_success",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "staticData": {},
  "meta": {},
  "settings": {
    "timezone": "UTC",
    "executionTimeout": 3600,
    "saveExecutionProgress": true,
    "saveDataErrorExecution": "all",
    "saveDataSuccessExecution": "all"
  },
  "id": "workflow_reset_password",
  "version": "3.0.0",
  "tenantId": "${TENANT_ID}"
}