website/server/api/auth/forgot-password.post.ts

import { hcaptchaVerify } from '~~/server/utils/hcaptcha';
import { ForgotPasswordSchema } from '~~/shared/api-types';

export default defineEventHandler(async (event): Promise<void> => {
	const body = await readZodBody(event, ForgotPasswordSchema);
	const grpc = useApiGrpc(event);

	const captchaResult = await hcaptchaVerify(event, body.captchaResponse);
	if (!captchaResult) {
		throw createApiError('INVALID_CAPTCHA');
	}

	await grpc.forgotPassword({
		emailAddressOrUsername: body.emailOrPassword
	});
});