fix: resolve auth modal UI issues and add forgot password flow (Closes #652)#710
Open
Prashansure wants to merge 1 commit into
Open
fix: resolve auth modal UI issues and add forgot password flow (Closes #652)#710Prashansure wants to merge 1 commit into
Prashansure wants to merge 1 commit into
Conversation
- Fix modal cutoff on small screens (max-height + overflow-y) - Remove duplicate auth-error element ID - Show password rules only on Sign Up view - Replace dead Profile button with functional dropdown - Migrate auth from in-memory store to persistent SQLite users table - Hash passwords with crypto.scryptSync (no extra dependencies) - Add forgot password endpoint with secure token + 1hr expiry - Add reset password endpoint with one-time token invalidation - Add reset-password.html with validation and expired-token handling - Prevent user enumeration on forgot password endpoint Closes Charushi06#652
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Related Issue
Closes #652
Summary
Fixes all three UI/auth issues reported in issue #652:
Changes Made
max-height: 90vh+overflow-y: autoso modal never clipsauth-errorelement ID (was breaking error display)const users = {}to persistent SQLiteuserstablecrypto.scryptSync(Node built-in, no new dependencies)POST /api/auth/forgot-passwordwith cryptographically secure token + 1hr expiryPOST /api/auth/reset-passwordwith one-time token invalidationreset-password.htmlpage with validation and expired-token handlingpassword_reset_tokenstable todatabase.jsTesting
Screenshots
[Add before/after screenshots here]