prop/lib/microwaveprop_web/controllers/user_reset_password_html
Graham McIntire 00aad3cb98
feat(auth): self-service password reset
Add a "Forgot your password?" flow off the login page. A 24-hour
reset_password token is emailed on request, the landing page lets the
user pick a new password, and all other tokens for the user are
revoked on success.

The request endpoint returns the same flash regardless of whether the
email matches a user so that attackers can't enumerate accounts.
2026-04-18 08:42:35 -05:00
..
edit.html.heex feat(auth): self-service password reset 2026-04-18 08:42:35 -05:00
new.html.heex feat(auth): self-service password reset 2026-04-18 08:42:35 -05:00