Forget Password Flow

Purpose

This flow enables users who have forgotten their credentials to securely reset their password and regain access to their account.

Flow Steps

1. The user clicks on the "Forgot Password" link on the login page.
   

3. The user is redirected to the Password Reset Request Page:
   auth/forgot-password
   

   

4. The user is prompted to enter the email address associated with their account.
   
   

5. Upon entering a valid email address, the user clicks the "Send Password Reset Link" button.

   • After submission, the button changes to indicate that a reset email has been sent.

   • Further inputs are disabled, and the user is instructed to check their email inbox.
     

     

6. The user receives an email containing a password reset link.

   

7. Clicking the reset link redirects the user to the following route:
   auth/forgot-password/{{user-specific-token}}
   
   

8. The Reset Password Page includes the following fields:

   • Email Address (pre-filled)

   • New Password

   • Confirm Password
     
     

9. Once the user clicks the "Reset Password" button:

   • The system displays a message: "Password changed successfully."

   • The user is redirected back to the login page to authenticate using their new credentials.