search

simov / express-admin

MySQL, MariaDB, PostgreSQL, SQLite admin for Node.js
MIT License
1.17k stars 223 forks source link

Forgot password workflow #70

Closed knownasilya closed 1 year ago

knownasilya commented 9 years ago

Would be very beneficial about now :neckbeard: haha. Something on the login page takes you to a new page that takes a username/email and sends an email with a change password token url, which will display a change password form.

simov commented 9 years ago

Agreed, adding it to the list.

knownasilya commented 9 years ago

@simov something in the meantime that would be helpful is documentation on how to create/reset the user.

simov commented 9 years ago

The previous issue about this problem isn't closed https://github.com/simov/express-admin/issues/29 take a look at my last comment. I'm definitely going to add a view for creating new accounts, and it's currently possible to have multiple accounts, that's just pure JSON as usual contained in user.json Thanks for raising the flag about this one :+1:

btw I don't think the admin:true flag in users.json is used for anything atm, that's just a reminder for me that there should be a root account at least

knownasilya commented 9 years ago

@simov thanks, I just noticed that one myself.

simov commented 1 year ago

Hi, in v2 of the admin user passwords are now stored in plain text and it is advisable to load them from external more secure storage before feeding them into the admin middleware. So this will eliminate the need of having a reset password workflow, sort of. Basically you will have to contact an admin, not ideal, but that workflow isn't really planned right now.