128
Views
5
Comments
[Password Reset Service] Forgot password / reset password service
password-reset-service
Service icon
Forge asset by Barduino

Hello, I am using this forge component to reset password in the forgot password flow that I am trying to implement on my App.

If someone has already used it, please tell me how?

I tried using the following flow: 
But I the reset link is not sent to my email address. Besides, when I check in Service Center it says: invalid role !



Could you please tell me what was wrong in my approach ?




Kind regards,
Sirajeddine

2022-06-23 06-21-50
Siddharth Vyas

Do you want any logic for forgot password and reset password ? as it can also be done without forge component.

2024-05-02 09-49-04
Murali Manoharan V
Champion

Hi Sirajeddine 

The Simple logic you can create this without the help of forge component is

1) Get user Id based on the username or email entered by the user.

2)If it matches just send a otp to user for verification.

3) For creating otp use Build in fuction GeneratePassword and send that by mail 

4) Then if the user enters correct otp. You need to redirect the user to create new password page.

5) From there user will give new password and do encryption using dependency action EncryptPassword

6) Store the password for the user Id already fetched

7) That's It


Hope It will be useful for you


Regards

Murali

2023-01-19 15-05-03
Sirajeddine Bouasker

Hi Murali,
Thank you for your reply but I already know this logic, there was a problem with the plugin, it was simply incomplete, anyway I managed to make it work. Thanks again. Have a nice day.

Regards,
Sirajeddine 

UserImage.jpg
Shah Rahman

Hey Sirajeddine,

How did you get it to work?


UserImage.jpg
Barduino

Folks, please take a look at the documentation for this component.

To cover the OWASP best practices, there is a bit of set up needed. If you're interested in these check out the companion article about this component.

Specifically in the documentation:

Timers

ServiceUser_Create

A service user can be automatically created by this module, and granted the PasswordResetService role.

Methods

UserToken_RegisterDomain

Registers a domain as an authorized domain for password recovery URL

ALWAYS use an server side method to call this API.

Requires user to have the PasswordResetService role


UserToken_UnRegisterDomain

Unregisters a domain as an authorized domain for password recovery URL.

ALWAYS use an server side method to call this API.

Requires user to have the PasswordResetService role.

Hope this helps.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.