Bassa
Bassa copied to clipboard
Add forgot password feature.
Add forgot password feature.
Expected Behavior
- There should be a button on ui which send password reset email to the respective user which redirects to password reset form
Current Behavior
- There's no such feature.
Expected Solution
- Add a hyperlink(forgot password) on login screen which opens a forgot password form to ask email.
- Send email email sending reference to the user about resetting the password of frontend on which redirects the user to open the reset form. In this we need to add a extra column in user table for the key user data storage reference that we need to confirm that the link is verified.
- On opening the reset form checks the link through url by making query to the user data at the api. if the link is verified get the user new password and change the existing password and send the mail to user notifying that his/her password has got successfully reset.
Nice catch! You working on this?
nope! you can do this.
Great! I'm working on this then
Sure.
@VibhorCodecianGupta if you haven't started this issue i want to put this task in my GCI task.
@vivonk add GCI label on it. i want to enlist this in my gci tasks.
@pheonixking25 before I add this to GCI label, could you explain also that how to implement this feature in actual. Like where the changes are required as the very new comers can't decide on it own.
@vivonk check now.
@agentmilindu please see whether it's something that GCI participants will able to do in specific time
@vivonk @phoenixking25 I think we have to divide this issue into several tasks if we are adding this to GCI.
- Add a hyperlink "Forgot password" on the login screen, Clicking the link opens a Forgot Password form to ask the email.
- When the form is submitted, send an email to the user with Password Resetting Link.
- Create a Password Resetting page, this is the page where the users land when the Password Resetting Link is clicked. Password Resetting token should be taken from the link and stored in a hidden input field along with a CSRF token.
- When the Password Resetting form is submitted, validate the tokens and reset the passwords to the new password.
- Send the mail to the user notifying that his/her password has got successfully reset.
Some tasks are hard and some are medium hard, but we have to publish the task in doable order. For example, 4th one cannpt be done untill 3rd is done. We have to mindull on these too. We can create the tasks and publish in order.
Ok will publish this in that order.
Hey @vivonk Is this issue resolved, if not can I pick this issue?
@phoenixking25 @VibhorCodecianGupta ?