So I'm trying to create a forgot password feature and I want to send email to user for verification. The problem is how should I do that? I've tried frontend services like emailJS but that didn't work because you pre-define where the emails are sent. I need it to be sent to the user, not me.
I've also tried backend services like nodemailer but with nodemailer I have to generate a code on the backend, send it to the frontend and on the email. The problem with this is that if someone gets access to anothers email he can click forgot password and get access to the code by looking at request sent to the backend in the chrome's dev tools
So now I'm stuck trying to figure this out. Can anyone help me?