bvandeusen
d354da5b51
Users who forget their password can now request a reset link via email. Tokens are SHA-256 hashed before storage, expire after 1 hour, and previous unused tokens are invalidated on new requests. The forgot-password endpoint always returns success to prevent email enumeration. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
168 lines
3.8 KiB
Vue
168 lines
3.8 KiB
Vue
<script setup lang="ts">
|
|
import { ref } from "vue";
|
|
import { apiPost } from "@/api/client";
|
|
import AppLogo from "@/components/AppLogo.vue";
|
|
|
|
const email = ref("");
|
|
const error = ref("");
|
|
const submitted = ref(false);
|
|
const submitting = ref(false);
|
|
|
|
async function handleSubmit() {
|
|
error.value = "";
|
|
submitting.value = true;
|
|
try {
|
|
await apiPost("/api/auth/forgot-password", { email: email.value });
|
|
submitted.value = true;
|
|
} catch (e: unknown) {
|
|
if (e && typeof e === "object" && "body" in e) {
|
|
const body = (e as { body?: { error?: string } }).body;
|
|
error.value = body?.error || "Something went wrong";
|
|
} else {
|
|
error.value = "Something went wrong";
|
|
}
|
|
} finally {
|
|
submitting.value = false;
|
|
}
|
|
}
|
|
</script>
|
|
|
|
<template>
|
|
<main class="auth-page">
|
|
<div class="auth-card">
|
|
<div class="auth-brand"><AppLogo :size="32" /><h1>Reset Password</h1></div>
|
|
|
|
<template v-if="!submitted">
|
|
<p class="auth-hint">
|
|
Enter the email address associated with your account and we'll send you a link to reset your password.
|
|
</p>
|
|
<form @submit.prevent="handleSubmit">
|
|
<div class="field">
|
|
<label for="email">Email</label>
|
|
<input
|
|
id="email"
|
|
v-model="email"
|
|
type="email"
|
|
autocomplete="email"
|
|
required
|
|
class="input"
|
|
/>
|
|
</div>
|
|
<p v-if="error" class="error-msg">{{ error }}</p>
|
|
<button type="submit" class="btn-submit" :disabled="submitting">
|
|
{{ submitting ? "Sending..." : "Send Reset Link" }}
|
|
</button>
|
|
</form>
|
|
</template>
|
|
|
|
<div v-else class="success-msg">
|
|
<p>If an account exists with that email address, you will receive a password reset link shortly.</p>
|
|
<p>Check your email and follow the instructions to reset your password.</p>
|
|
</div>
|
|
|
|
<p class="auth-footer">
|
|
<router-link to="/login">Back to Sign In</router-link>
|
|
</p>
|
|
</div>
|
|
</main>
|
|
</template>
|
|
|
|
<style scoped>
|
|
.auth-page {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
min-height: 100vh;
|
|
padding: 1rem;
|
|
}
|
|
.auth-card {
|
|
width: 100%;
|
|
max-width: 400px;
|
|
background: var(--color-bg-card);
|
|
border: 1px solid var(--color-border);
|
|
border-radius: var(--radius-md);
|
|
padding: 2rem;
|
|
}
|
|
.auth-brand {
|
|
display: flex;
|
|
align-items: center;
|
|
justify-content: center;
|
|
gap: 0.5rem;
|
|
margin-bottom: 1.5rem;
|
|
}
|
|
.auth-card h1 {
|
|
margin: 0;
|
|
text-align: center;
|
|
}
|
|
.auth-hint {
|
|
text-align: center;
|
|
font-size: 0.9rem;
|
|
color: var(--color-text-secondary);
|
|
margin-bottom: 1rem;
|
|
}
|
|
.field {
|
|
margin-bottom: 1rem;
|
|
}
|
|
.field label {
|
|
display: block;
|
|
font-size: 0.9rem;
|
|
font-weight: 600;
|
|
margin-bottom: 0.35rem;
|
|
}
|
|
.input {
|
|
width: 100%;
|
|
padding: 0.5rem 0.75rem;
|
|
border: 1px solid var(--color-border);
|
|
border-radius: var(--radius-sm);
|
|
font-size: 0.95rem;
|
|
background: var(--color-bg);
|
|
color: var(--color-text);
|
|
box-sizing: border-box;
|
|
}
|
|
.input:focus {
|
|
outline: none;
|
|
border-color: var(--color-primary);
|
|
}
|
|
.error-msg {
|
|
color: var(--color-danger);
|
|
font-size: 0.9rem;
|
|
margin: 0 0 0.75rem;
|
|
}
|
|
.success-msg {
|
|
text-align: center;
|
|
color: var(--color-text-secondary);
|
|
font-size: 0.95rem;
|
|
padding: 0.5rem 0;
|
|
}
|
|
.success-msg p {
|
|
margin: 0.5rem 0;
|
|
}
|
|
.btn-submit {
|
|
width: 100%;
|
|
padding: 0.6rem;
|
|
background: var(--color-primary);
|
|
color: #fff;
|
|
border: none;
|
|
border-radius: var(--radius-sm);
|
|
cursor: pointer;
|
|
font-size: 0.95rem;
|
|
font-weight: 600;
|
|
}
|
|
.btn-submit:disabled {
|
|
opacity: 0.6;
|
|
cursor: default;
|
|
}
|
|
.btn-submit:hover:not(:disabled) {
|
|
opacity: 0.9;
|
|
}
|
|
.auth-footer {
|
|
text-align: center;
|
|
font-size: 0.9rem;
|
|
color: var(--color-text-secondary);
|
|
margin: 1rem 0 0;
|
|
}
|
|
.auth-footer a {
|
|
color: var(--color-primary);
|
|
}
|
|
</style>
|