update query with $eq

apps/app/src/server/middlewares/inject-reset-order-by-token-middleware.ts

@@ -22,7 +22,7 @@ export default async(req: ReqWithPasswordResetOrder, res: Response, next: NextFu
     return next(createError(400, 'Token not found', { code: forgotPasswordErrorCode.TOKEN_NOT_FOUND }));
   }
 
-  const passwordResetOrder = await PasswordResetOrder.findOne({ token });
+  const passwordResetOrder = await PasswordResetOrder.findOne({ token: { $eq: token } });
 
   // check if the token is valid
   if (passwordResetOrder == null || passwordResetOrder.isExpired() || passwordResetOrder.isRevoked) {