Hello, I am using this forge component to reset password in the forgot password flow that I am trying to implement on my App.If someone has already used it, please tell me how?
I tried using the following flow: But I the reset link is not sent to my email address. Besides, when I check in Service Center it says: invalid role !Could you please tell me what was wrong in my approach ?Kind regards,Sirajeddine
Do you want any logic for forgot password and reset password ? as it can also be done without forge component.
Hi Sirajeddine
The Simple logic you can create this without the help of forge component is
1) Get user Id based on the username or email entered by the user.
2)If it matches just send a otp to user for verification.
3) For creating otp use Build in fuction GeneratePassword and send that by mail
4) Then if the user enters correct otp. You need to redirect the user to create new password page.
5) From there user will give new password and do encryption using dependency action EncryptPassword
6) Store the password for the user Id already fetched
7) That's It
Hope It will be useful for you
Regards
Murali
Hi Murali,Thank you for your reply but I already know this logic, there was a problem with the plugin, it was simply incomplete, anyway I managed to make it work. Thanks again. Have a nice day.Regards,Sirajeddine
Hey Sirajeddine,
How did you get it to work?
Folks, please take a look at the documentation for this component.
To cover the OWASP best practices, there is a bit of set up needed. If you're interested in these check out the companion article about this component.
Specifically in the documentation:
Timers
ServiceUser_Create
A service user can be automatically created by this module, and granted the PasswordResetService role.
Methods
UserToken_RegisterDomain
Registers a domain as an authorized domain for password recovery URL
ALWAYS use an server side method to call this API.
Requires user to have the PasswordResetService role
UserToken_UnRegisterDomain
Unregisters a domain as an authorized domain for password recovery URL.
Requires user to have the PasswordResetService role.
Hope this helps.