Secure, instant password reset delivery for modern SaaS with zero token expiration timeouts

import { SadaSend } from 'sadasend';

const sadasend = new SadaSend(process.env.SADASEND_API_KEY);

export async function sendPasswordResetToken(user: { email: string; token: string }) {
  const resetUrl = `https://app.yourdomain.com/reset-password?token=${user.token}`;

  return await sadasend.emails.send({
    from: 'Security <security@yourdomain.com>',
    to: user.email,
    subject: 'Password Reset Request',
    html: `
      <div style="font-family: sans-serif; max-width: 500px; margin: 0 auto;">
        <h2>Password Reset Request</h2>
        <p>We received a request to reset your password. This link expires in 15 minutes.</p>
        <p><a href="${resetUrl}" style="background: #2563eb; color: #fff; padding: 12px 24px; text-decoration: none; border-radius: 6px; display: inline-block;">Reset Password</a></p>
        <p style="color: #64748b; font-size: 13px;">If you did not request this change, you can safely ignore this email.</p>
      </div>
    `,
  });
}