bvandeusenandClaude Opus 5.5
593b583d23
Step #5429 "Reset by email: request, link and new-password page" of milestone 497 "Passwords: change your own, and reset it by email". - Sign-in page: "Forgot your password?" while a mail server is set. - /forgot takes a username or email and answers the same either way; only an active local account with a real address gets mail. Requests count per address on their own throttle, so they never lock out sign-in. - password_resets (migration 0039): a one-time key, stored as its sha256, working for an hour; asking again replaces it. - /reset/<key>: the new password, then signed straight in; every other browser is signed out (sessions_since). Bad keys count as invite keys do. - Email "[Steward] Reset your password", in the account's own zone. - Audited: user.password_reset_requested, user.password_reset_by_email. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
41 lines
1.9 KiB
HTML
41 lines
1.9 KiB
HTML
{% extends "base.html" %}
|
|
{% block title %}Login — Steward{% endblock %}
|
|
{% block content %}
|
|
<div style="max-width:400px;margin:4rem auto;">
|
|
<div class="card">
|
|
<p style="color: var(--text-dim); font-family: var(--font-serif); font-style: italic; font-size: 1.15rem; text-align: center; margin: 0 0 1.5rem;">Under Watch, Under Care.</p>
|
|
{% if error %}
|
|
<div style="color:var(--red);font-size:0.88rem;margin-bottom:1rem;
|
|
background:var(--red-dim);padding:0.6rem 0.75rem;border-radius:4px;">
|
|
{{ error }}
|
|
</div>
|
|
{% endif %}
|
|
{% if oidc_enabled %}
|
|
<a href="/login/oidc{% if next_url %}?next={{ next_url | urlencode }}{% endif %}" class="btn" style="width:100%;text-align:center;margin-bottom:1.25rem;display:block;">
|
|
Sign in with SSO
|
|
</a>
|
|
<div style="display:flex;align-items:center;gap:0.75rem;margin-bottom:1.25rem;">
|
|
<div style="flex:1;height:1px;background:var(--border-mid);"></div>
|
|
<span style="font-size:0.78rem;color:var(--text-dim);">or</span>
|
|
<div style="flex:1;height:1px;background:var(--border-mid);"></div>
|
|
</div>
|
|
{% endif %}
|
|
<form method="post" action="/login">{{ csrf_field() }}
|
|
{% if next_url %}<input type="hidden" name="next" value="{{ next_url }}">{% endif %}
|
|
<div class="form-group">
|
|
<input type="text" name="username" placeholder="Username" autofocus required>
|
|
</div>
|
|
<div class="form-group">
|
|
<input type="password" name="password" placeholder="Password" required>
|
|
</div>
|
|
<button type="submit" class="btn {% if oidc_enabled %}btn-ghost{% endif %}" style="width:100%;">
|
|
Sign In
|
|
</button>
|
|
</form>
|
|
{% if reset_by_email() %}
|
|
<p class="login-forgot"><a href="/forgot">Forgot your password?</a></p>
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
{% endblock %}
|