Feature: check for email address existence before sending an email with password recovery token

[inkiltie]

Currently I'm able to enter any garbage email in Password Recovery page and successfully submit. Needed something like in signup API: await getExistingUser(options.to) in send.js or even in RecoverPassword front-end on Next.js.

[inkiltie]

Adding the following code to api/users/graphql/mutations solves the issue:

import getExistingUserByEmail from "../getExistingUserByEmail";

to recoverPassword function:

const existingUser = await getExistingUserByEmail({
  emailAddress: args.emailAddress,
});

if (!existingUser) {
  throw new Error(`A user with the email address ${args.emailAddress} could not be found.`);
}