opensupports/server/controllers/user/send-recover-password.php

<?php
use Respect\Validation\Validator as DataValidator;

class SendRecoverPasswordController extends Controller {
    const PATH = '/send-recover-password';

    public function validations() {
        return [
            'permission' => 'any',
            'requestData' => [
                'email' => [
                    'validation' => DataValidator::email(),
                    'error' => ERRORS::INVALID_EMAIL
                ]
            ]
        ];
    }

    public function handler() {
        $email = Controller::request('email');

        $token = Hashing::generateRandomToken();

        $recoverPassword = new RecoverPassword();
        $recoverPassword->setProperties(array(
            'email' => $email,
            'token' => $token
        ));
        $recoverPassword->store();

        Response::respondSuccess();
        //TODO:  mandar  mail con token
    }
}