1

I have a project where i need to implement forgot password at login time. So, i was wondering whether spring provides any help in that matter. I tried a simple method to implement reset password where if the user's username and email are valid show reset password form, otherwise "Invalid user details". But i want to send a reset password link in email to the user. Any help will be appreciated. Thank you.

Shafqat Shafi
  • 1,108
  • 17
  • 30

1 Answers1

1

Unfortunately, Spring does not help with all these what I call "authentication flows": registration, forgot-password, even change password has only a partial support.

I searched a lot on this subject, and 4-5 years ago there was no package that supports all these flows. This is why I wrote the "authentication flows", open source, Spring based (MVC or REST).

See this question, and all relevant links and data are in my answer there: Create Account, Forgot Password and Change Password

As for your question, in general, the user clicks "forgot password", and gets a screen with his email or username (or both). He enters the data, the server validates it and if it is correct, the server sends the "reset link" to the users' email. The user clicks the link, it gets to the server (to validate link's expiration etc) and shows the user "reset password" page.

HTH

OhadR
  • 8,276
  • 3
  • 47
  • 53
  • 1
    Thanks a lot. Link you provided gives enough emphasis on forgot password topic(other topics also but not of my concern) – Shafqat Shafi Jan 29 '18 at 08:59