Add password visibility toggle & password reset flow

backend/database.py

@@ -1,6 +1,9 @@
+import hashlib
+import secrets
 import sqlite3
 import json
 from contextlib import contextmanager
+from datetime import datetime, timedelta, timezone
 from backend.config import DATABASE_PATH
 
 
@@ -67,6 +70,17 @@ def init_db():
                 UNIQUE(user_id, job_id)
             );
 
+            -- Password reset tokens
+            CREATE TABLE IF NOT EXISTS reset_tokens (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                user_id INTEGER NOT NULL,
+                token_hash TEXT NOT NULL,
+                expires_at TIMESTAMP NOT NULL,
+                used INTEGER DEFAULT 0,
+                created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+                FOREIGN KEY (user_id) REFERENCES users(id)
+            );
+
             -- Job category definitions
             CREATE TABLE IF NOT EXISTS job_categories (
                 id INTEGER PRIMARY KEY AUTOINCREMENT,
@@ -146,6 +160,48 @@ def get_user_by_id(user_id: int) -> dict | None:
         return dict(row) if row else None
 
 
+# ── Password Reset ──────────────────────────────────────────────────────────
+
+def create_reset_token(email: str) -> str | None:
+    user = get_user_by_email(email)
+    if not user:
+        return None
+    raw_token = secrets.token_hex(32)
+    token_hash = hashlib.sha256(raw_token.encode()).hexdigest()
+    expires_at = (datetime.now(timezone.utc) + timedelta(minutes=15)).isoformat()
+    with get_db() as conn:
+        conn.execute(
+            "DELETE FROM reset_tokens WHERE user_id = ?", (user["id"],)
+        )
+        conn.execute(
+            "INSERT INTO reset_tokens (user_id, token_hash, expires_at) VALUES (?, ?, ?)",
+            (user["id"], token_hash, expires_at),
+        )
+    return raw_token
+
+
+def get_valid_token(raw_token: str) -> dict | None:
+    token_hash = hashlib.sha256(raw_token.encode()).hexdigest()
+    with get_db() as conn:
+        row = conn.execute(
+            """SELECT rt.*, u.email FROM reset_tokens rt
+               JOIN users u ON u.id = rt.user_id
+               WHERE rt.token_hash = ? AND rt.used = 0 AND rt.expires_at > datetime('now')""",
+            (token_hash,),
+        ).fetchone()
+        return dict(row) if row else None
+
+
+def mark_token_used(token_id: int) -> None:
+    with get_db() as conn:
+        conn.execute("UPDATE reset_tokens SET used = 1 WHERE id = ?", (token_id,))
+
+
+def update_password(user_id: int, password_hash: str) -> None:
+    with get_db() as conn:
+        conn.execute("UPDATE users SET password_hash = ? WHERE id = ?", (password_hash, user_id))
+
+
 # ── API Keys ────────────────────────────────────────────────────────────────
 
 def save_api_keys(user_id: int, keys: dict) -> None:
@@ -271,7 +327,7 @@ def save_global_jobs(jobs: list[dict]) -> int:
 
 def classify_job_title(title: str, description: str = "") -> str:
     text = f"{title} {description}".lower()
-    from config import JOB_CATEGORIES
+    from backend.config import JOB_CATEGORIES
     best_cat = "other"
     best_score = 0
     for slug, info in JOB_CATEGORIES.items():

backend/main.py

@@ -19,6 +19,7 @@ from backend.database import (
     get_categories, classify_job_title,
     link_user_job, get_user_job_link, get_user_linked_jobs, update_link_tailoring,
     deactivate_old_jobs,
+    create_reset_token, get_valid_token, mark_token_used, update_password,
 )
 from backend.auth import hash_password, verify_password, create_access_token, get_current_user
 from backend.llm import tailor_application as llm_tailor, make_cv_from_scratch
@@ -75,6 +76,12 @@ class RegisterRequest(BaseModel):
 class LoginRequest(BaseModel):
     email: str; password: str
 
+class ForgotPasswordRequest(BaseModel):
+    email: str
+
+class ResetPasswordRequest(BaseModel):
+    token: str; password: str
+
 class ScrapeRequest(BaseModel):
     title: str = ""; boards: list[str] = []
 
@@ -113,6 +120,30 @@ def me(current_user: dict = Depends(get_current_user)):
     return get_user_by_id(current_user["user_id"])
 
 
+@app.post("/api/auth/forgot-password")
+def forgot_password(req: ForgotPasswordRequest):
+    if not req.email:
+        raise HTTPException(400, "Email is required")
+    raw_token = create_reset_token(req.email)
+    if not raw_token:
+        return {"message": "If that email is registered, a reset token has been generated"}
+    return {"token": raw_token, "message": "Use this token to reset your password (expires in 15 minutes)"}
+
+
+@app.post("/api/auth/reset-password")
+def reset_password(req: ResetPasswordRequest):
+    if not req.token or not req.password:
+        raise HTTPException(400, "Token and password are required")
+    if len(req.password) < 6:
+        raise HTTPException(400, "Password must be at least 6 characters")
+    entry = get_valid_token(req.token)
+    if not entry:
+        raise HTTPException(400, "Invalid or expired reset token")
+    mark_token_used(entry["id"])
+    update_password(entry["user_id"], hash_password(req.password))
+    return {"message": "Password reset successfully"}
+
+
 # ── CV Routes ───────────────────────────────────────────────────────────────
 
 @app.get("/api/cv")
@@ -269,6 +300,70 @@ def scrape_cron(req: ScrapeRequest, token: str = Query("")):
     threading.Thread(target=run_nightly_scrape, daemon=True).start()
     return {"status": "started", "message": "Scraping in background"}
 
+@app.get("/api/check-network")
+def check_network():
+    import requests as _req
+    results = {}
+    for url in ["https://google.com", "https://www.myjobmag.com", "https://api.github.com"]:
+        try:
+            r = _req.get(url, timeout=8)
+            results[url] = f"OK ({r.status_code})"
+        except Exception as e:
+            results[url] = f"FAIL: {type(e).__name__}"
+    return results
+
+@app.get("/api/scrape/test")
+def scrape_test(board: str = ""):
+    from backend.scrapers.nigeria import NigerianJobScraper
+    from backend.database import save_global_jobs, get_global_stats
+    s = NigerianJobScraper()
+
+    if board:
+        import io, contextlib, sys, requests as _req
+        url = f"https://www.{board}.com/search?q=Data+Analyst"
+        if board == "hotnigerianjobs":
+            url = "https://www.hotnigerianjobs.com/?s=Data+Analyst"
+        elif board == "myjobmag":
+            url = "https://www.myjobmag.com/search?q=Data+Analyst"
+        elif board == "ngcareers":
+            url = "https://ngcareers.com/jobs?q=Data+Analyst"
+        elif board == "jobzilla":
+            url = "https://www.jobzilla.ng/jobs?q=Data+Analyst"
+        elif board == "jobgurus":
+            url = "https://www.jobgurus.com.ng/?s=Data+Analyst"
+        r = _req.get(url, timeout=15, headers={"User-Agent": "Mozilla/5.0"})
+        method = getattr(s, f"scrape_{board}", None)
+        if not method:
+            return {"error": f"no scraper named {board}"}
+        buf = io.StringIO()
+        with contextlib.redirect_stdout(buf):
+            with contextlib.redirect_stderr(buf):
+                try:
+                    jobs = method("Data Analyst")
+                except Exception as e:
+                    return {"board": board, "error": str(e), "logs": buf.getvalue()[:2000]}
+        return {
+            "board": board,
+            "count": len(jobs or []),
+            "first": (jobs[0] if jobs else None),
+            "logs": buf.getvalue()[:2000],
+            "direct_fetch": {"status": r.status_code, "length": len(r.text)},
+        }
+
+    all_jobs = []
+    results = {}
+    for name in dir(s):
+        if name.startswith("scrape_"):
+            board_name = name.replace("scrape_", "")
+            try:
+                jobs = getattr(s, name)("Data Analyst")
+                results[board_name] = len(jobs or [])
+                if jobs: all_jobs.extend(jobs)
+            except Exception as e:
+                results[board_name] = f"err: {e}"
+    saved = save_global_jobs(all_jobs)
+    return {"results": results, "total_scraped": len(all_jobs), "total_saved": saved, "stats": get_global_stats()}
+
 
 @app.get("/api/jobs")
 def list_global_jobs(

frontend/forgot-password.html

@@ -0,0 +1,105 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Joblin - Reset Password</title>
+<link rel="stylesheet" href="styles.css">
+</head>
+<body>
+<div class="auth-page">
+  <div class="auth-card" id="step1">
+    <a href="index.html" class="auth-brand">
+      <div class="auth-brand-icon">J</div>
+      <h1>Job<span>lin</span></h1>
+    </a>
+    <h1>Reset Password</h1>
+    <p class="subtitle">Enter your email to get a reset token</p>
+    <form id="tokenForm">
+      <div class="form-group">
+        <label>Email</label>
+        <input type="email" id="email" placeholder="you@example.com" required autocomplete="email">
+      </div>
+      <button type="submit" class="btn btn-primary btn-lg" style="width:100%" id="tokenBtn">Get Reset Token</button>
+    </form>
+    <p class="footer-link"><a href="login.html">Back to sign in</a></p>
+  </div>
+
+  <div class="auth-card" id="step2" style="display:none">
+    <a href="index.html" class="auth-brand">
+      <div class="auth-brand-icon">J</div>
+      <h1>Job<span>lin</span></h1>
+    </a>
+    <h1>Reset Password</h1>
+    <p class="subtitle">Use the token below to set a new password</p>
+    <div class="reset-token-box" id="tokenDisplay"></div>
+    <form id="resetForm">
+      <div class="form-group">
+        <label>Reset Token</label>
+        <input type="text" id="resetToken" placeholder="Paste or copy the token above" required>
+      </div>
+      <div class="form-group">
+        <label>New Password</label>
+        <div class="pwd-wrapper">
+          <input type="password" id="newPassword" placeholder="At least 6 characters" required minlength="6" autocomplete="new-password">
+          <span class="pwd-toggle" onclick="togglePwd('newPassword',this)">&#128065;</span>
+        </div>
+      </div>
+      <button type="submit" class="btn btn-primary btn-lg" style="width:100%" id="resetBtn">Reset Password</button>
+    </form>
+    <p class="footer-link"><a href="login.html">Back to sign in</a></p>
+  </div>
+</div>
+<script>
+function togglePwd(id, el) {
+  const inp = document.getElementById(id);
+  const isPwd = inp.type === "password";
+  inp.type = isPwd ? "text" : "password";
+  el.innerHTML = isPwd ? "&#128064;" : "&#128065;";
+}
+</script>
+<script src="app.js"></script>
+<script>
+const API_BASE = window.location.origin;
+
+document.getElementById("tokenForm").addEventListener("submit", async (e) => {
+  e.preventDefault();
+  const btn = document.getElementById("tokenBtn");
+  btn.disabled = true;
+  btn.innerHTML = '<span class="spinner"></span> Sending...';
+  try {
+    const data = await apiFetch("POST", "/api/auth/forgot-password", {
+      email: document.getElementById("email").value,
+    });
+    document.getElementById("tokenDisplay").textContent = data.token || "Token generated (check console)";
+    if (!data.token) console.log("Reset token:", data);
+    document.getElementById("step1").style.display = "none";
+    document.getElementById("step2").style.display = "block";
+  } catch (err) {
+    showToast(err.message, "error");
+    btn.disabled = false;
+    btn.textContent = "Get Reset Token";
+  }
+});
+
+document.getElementById("resetForm").addEventListener("submit", async (e) => {
+  e.preventDefault();
+  const btn = document.getElementById("resetBtn");
+  btn.disabled = true;
+  btn.innerHTML = '<span class="spinner"></span> Resetting...';
+  try {
+    const data = await apiFetch("POST", "/api/auth/reset-password", {
+      token: document.getElementById("resetToken").value,
+      password: document.getElementById("newPassword").value,
+    });
+    showToast("Password reset successfully! Redirecting to login...");
+    setTimeout(() => { window.location.href = "login.html"; }, 1500);
+  } catch (err) {
+    showToast(err.message, "error");
+    btn.disabled = false;
+    btn.textContent = "Reset Password";
+  }
+});
+</script>
+</body>
+</html>

frontend/login.html

@@ -22,13 +22,25 @@
       </div>
       <div class="form-group">
         <label>Password</label>
-        <input type="password" id="password" placeholder="Enter your password" required autocomplete="current-password">
+        <div class="pwd-wrapper">
+          <input type="password" id="password" placeholder="Enter your password" required autocomplete="current-password">
+          <span class="pwd-toggle" onclick="togglePwd('password',this)">&#128065;</span>
+        </div>
       </div>
       <button type="submit" class="btn btn-primary btn-lg" style="width:100%" id="loginBtn">Sign In</button>
     </form>
+    <p class="footer-link" style="margin-bottom:var(--space-2)"><a href="forgot-password.html">Forgot password?</a></p>
     <p class="footer-link">Don't have an account? <a href="register.html">Create one</a></p>
   </div>
 </div>
+<script>
+function togglePwd(id, el) {
+  const inp = document.getElementById(id);
+  const isPwd = inp.type === "password";
+  inp.type = isPwd ? "text" : "password";
+  el.innerHTML = isPwd ? "&#128064;" : "&#128065;";
+}
+</script>
 <script src="app.js"></script>
 <script>
 const btn = document.getElementById("loginBtn");

frontend/register.html

@@ -26,13 +26,24 @@
       </div>
       <div class="form-group">
         <label>Password</label>
-        <input type="password" id="password" placeholder="At least 6 characters" required minlength="6" autocomplete="new-password">
+        <div class="pwd-wrapper">
+          <input type="password" id="password" placeholder="At least 6 characters" required minlength="6" autocomplete="new-password">
+          <span class="pwd-toggle" onclick="togglePwd('password',this)">&#128065;</span>
+        </div>
       </div>
       <button type="submit" class="btn btn-primary btn-lg" style="width:100%" id="registerBtn">Create Account</button>
     </form>
     <p class="footer-link">Already have an account? <a href="login.html">Sign in</a></p>
   </div>
 </div>
+<script>
+function togglePwd(id, el) {
+  const inp = document.getElementById(id);
+  const isPwd = inp.type === "password";
+  inp.type = isPwd ? "text" : "password";
+  el.innerHTML = isPwd ? "&#128064;" : "&#128065;";
+}
+</script>
 <script src="app.js"></script>
 <script>
 const btn = document.getElementById("registerBtn");

frontend/styles.css

@@ -646,6 +646,25 @@ label { display: block; font-size: var(--text-sm); font-weight: 500; color: var(
 
 .auth-card .footer-link { text-align: center; font-size: var(--text-sm); color: var(--text-muted); margin-top: var(--space-5); }
 
+/* ── Password visibility toggle ── */
+.pwd-wrapper { position: relative; }
+.pwd-wrapper input { padding-right: 44px; width: 100%; }
+.pwd-toggle {
+  position: absolute; right: 12px; top: 50%; transform: translateY(-50%);
+  cursor: pointer; font-size: 20px; line-height: 1; user-select: none;
+  color: var(--text-muted); transition: color .15s; padding: 4px;
+}
+.pwd-toggle:hover { color: var(--text-default); }
+
+/* ── Reset token display ── */
+.reset-token-box {
+  background: var(--bg-surface-hover); border: 1px dashed var(--color-primary-300);
+  border-radius: var(--radius-lg); padding: var(--space-4);
+  font-family: var(--font-mono, monospace); font-size: var(--text-xs);
+  word-break: break-all; text-align: center; margin-bottom: var(--space-5);
+  color: var(--text-default); user-select: all;
+}
+
 /* ── Search ── */
 .search-section { display: flex; gap: var(--space-2); }
 .search-section input { flex: 1; }