express-admin icon indicating copy to clipboard operation
express-admin copied to clipboard

Forgot password workflow

Open knownasilya opened this issue 11 years ago • 4 comments
trafficstars

Would be very beneficial about now :neckbeard: haha. Something on the login page takes you to a new page that takes a username/email and sends an email with a change password token url, which will display a change password form.

knownasilya avatar Sep 09 '14 17:09 knownasilya

Agreed, adding it to the list.

simov avatar Sep 09 '14 18:09 simov

@simov something in the meantime that would be helpful is documentation on how to create/reset the user.

knownasilya avatar Sep 09 '14 18:09 knownasilya

The previous issue about this problem isn't closed https://github.com/simov/express-admin/issues/29 take a look at my last comment. I'm definitely going to add a view for creating new accounts, and it's currently possible to have multiple accounts, that's just pure JSON as usual contained in user.json Thanks for raising the flag about this one :+1:

btw I don't think the admin:true flag in users.json is used for anything atm, that's just a reminder for me that there should be a root account at least

simov avatar Sep 09 '14 18:09 simov

@simov thanks, I just noticed that one myself.

knownasilya avatar Sep 09 '14 18:09 knownasilya

Hi, in v2 of the admin user passwords are now stored in plain text and it is advisable to load them from external more secure storage before feeding them into the admin middleware. So this will eliminate the need of having a reset password workflow, sort of. Basically you will have to contact an admin, not ideal, but that workflow isn't really planned right now.

simov avatar Feb 17 '23 17:02 simov