[HIGH] Auth: Forgot password, Reset password #14

Open
opened 2026-04-19 11:21:29 +00:00 by NW · 0 comments
Owner

Problem

Only login and change-password are implemented. No self-service password recovery.

Required:

  • POST /api/auth/forgot-password — send reset token
  • POST /api/auth/reset-password — verify token + set new password
  • password_resets table
  • Reset password page
  • Login page Forgot password link
  • Rate limit on forgot-password
  • Token expiry (1 hour)

Files: src/server/index.ts, public/login.html, new public/reset-password.html


Migrated from UniqueSoft/APAW#79

## Problem Only login and change-password are implemented. No self-service password recovery. ### Required: - POST /api/auth/forgot-password — send reset token - POST /api/auth/reset-password — verify token + set new password - password_resets table - Reset password page - Login page Forgot password link - Rate limit on forgot-password - Token expiry (1 hour) ### Files: src/server/index.ts, public/login.html, new public/reset-password.html --- *Migrated from UniqueSoft/APAW#79*
NW added this to the Production Readiness - Phase 2 milestone 2026-04-19 11:21:29 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: UniqueSoft/TenerifeProp#14