add forget password

app/login/api/engine/request_reset_otp.php

@@ -0,0 +1,32 @@
+<?php
+
+require '../../../session.php';
+define('UNAUTHENTICATED_ROUTE', true);
+require '../../../assets/utils/db_auth.php';
+
+// Resolve user by username or email
+$identifier = strtolower(trim($data['identifier'] ?? ''));
+
+if (!$identifier) {
+    http_response_code(422);
+    exit(json_encode(['success' => 0, 'message' => 'Please enter your username or email.']));
+}
+
+$sth = $pdo1->prepare(
+    "SELECT user_id, default_company FROM user WHERE username = :i OR email = :i LIMIT 1"
+);
+$sth->execute([':i' => $identifier]);
+$user = $sth->fetch(PDO::FETCH_ASSOC);
+
+if (!$user) {
+    http_response_code(404);
+    exit(json_encode(['success' => 0, 'message' => 'No account found with that username or email.']));
+}
+
+$user_id    = (int)$user['user_id'];
+$company_id = (int)($user['default_company'] ?? 0);
+
+require_once $include_url . 'assets/utils/classes/PasswordResetManager.php';
+
+$manager = new PasswordResetManager($pdo1, $pdo2, $include_url, $SMTP, $pinkey);
+$manager->handleRequestOtp($user_id, $company_id);