uwscope / scope-web

0 stars 5 forks source link

Enable Password Reset Using Cognito-Emailed Code #489

Closed jayfo closed 5 months ago

jayfo commented 5 months ago

Implement password resets via emailed code, together with server updates in:

https://github.com/uwscope/scope-aws-infrastructure/pull/30

Adds a "Forgot Password?" prompt at login, which toggle a reset request form:

Registry App
Login
Reset Request

Request generates an email:

This code and a new password are entered:

Registry App
Reset Password

Confirmation is provided, and several account / password error conditions are handled (shown only with registry, the app provides identical error messages):

Registry
Confirmation of Reset
Sign In Account Incorrect
Sign In Password Incorrect
Reset Account Incorrect
Reset Code Incorrect

Cognito rate limits reset requests:

Registry
Rate Limit

Cognito does not allow a reset request if a person currently has a temporary password (i.e., reset by us):

Registry
Temporary Password

Includes more precise password validation feedback during update / reset:

Registry App
Update Password Validation
jayfo commented 5 months ago

Fixes #310.

Fixes #456.