Authrepository.cs

public async Task<ServiceResponse<ResetPasswordDto>> ResetPassword(ResetPasswordDto request)
        {
            ServiceResponse<ResetPasswordDto> response = new ServiceResponse<ResetPasswordDto>();

            // Check if the provided email is not null.
            if (request.Email is not null)
            {   
                // Try to find a user with the given email in the database.
                var user = await _dbContext.Users.FirstOrDefaultAsync(
                    u => u.Email!.ToLower() == request.Email.ToLower()
                );

                // Check if a user with the given email was found.
                if (user != null)
                {
                    if (user.IsVerified == false)
                    {
                        response.Success = false;
                        response.Message = "User Not Verified";
                        return response;
                    }

                    if (user.OtpExpiration > DateTimeOffset.UtcNow)
                    {
                        CreatePasswordHash(
                            request.NewPassword,
                            out byte[] passwordHash,
                            out byte[] passwordSalt
                        );
                        user.PasswordHash = passwordHash;
                        user.PasswordSalt = passwordSalt;
                        user.Otp = null;
                        user.OtpExpiration = null;
                        await _dbContext.SaveChangesAsync();
                        response.Message = "Password changed successfully.";
                    }
                    else
                    {
                        response.Success = false;
                        response.Message = "Your OTP is expired.";
                        return response;
                    }
                }
                else
                {
                    response.Success = false;
                    response.Message = "Invalid Email Address.";
                }
            }
            else
            {
                response.Success = false;
                response.Message = "Email is Required.";
            }

            return response;
        }