StephanRichter/LightOidc
1
0
Fork 0
Code Issues Pull Requests Actions Projects Releases Wiki Activity

implemented password reset flow

Browse Source 
Signed-off-by: Stephan Richter <s.richter@srsoftware.de>
This commit is contained in:
Stephan Richter
2024-08-09 23:56:40 +02:00
parent 95d47e3d63
commit 62c85410a9
10 changed files with 155 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
de.srsoftware.oidc.web/src/main/resources/en/login.html
View File

@@ -33,7 +33,7 @@
</tr>
<tr>
<td></td>
<td><button type="button" class="light" onClick="resetPw()">reset password?</button></td>
<td><button type="button" id="resetBtn" class="light" onClick="resetPw()">reset password?</button></td>
</tr>
</table>
</fieldset>

53
de.srsoftware.oidc.web/src/main/resources/en/reset.html Normal file
View File

@@ -0,0 +1,53 @@
<html>
<head>
<meta charset="utf-8">
<title>Light OIDC</title>
<script src="scripts/common.js"></script>
<script src="scripts/reset.js"></script>
<link rel="stylesheet" href="style.css" />
</head>
<body>
<nav></nav>
<div id="content">
<h1>Reset password</h1>
<div>Welcome! You may now reset your password!</div>
<form>
<fieldset>
<legend>
Password
</legend>
<table>
<tr>
<th>New Password</th>
<td><input id="newpass1" type="password"></td>
</tr>
<tr>
<th>Repeat Password</th>
<td><input id="newpass2" type="password" onkeydown="passKeyDown()"></td>
</tr>
<tr id="password_mismatch" style="display: none">
<th>Error</th>
<td class="warning">Mismatch between new password and repetition!</td>
</tr>
<tr id="weak_password" style="display: none">
<th>Error</th>
<td class="warning">Your password is too weak!</td>
</tr>
<tr id="missing_token" style="display: none">
<th>Error</th>
<td class="warning">Access token missing!</td>
</tr>
<tr id="invalid_token" style="display: none">
<th>Error</th>
<td class="warning">I received an access token, but it is invalid!</td>
</tr>
<tr>
<td></td>
<td><button id="passBtn" type="button" onClick="updatePass()">Update</button></td>
</tr>
</table>
</fieldset>
</form>
</div>
</body>
</html>

9
de.srsoftware.oidc.web/src/main/resources/en/scripts/login.js
View File

@@ -1,4 +1,4 @@
function doRedirect(){
function doRedirect(){
let params = new URL(document.location.toString()).searchParams;
redirect( params.get("return_to") || 'index.html');
return false;
@@ -25,10 +25,9 @@ function resetPw(){
return;
}
hide('bubble');
fetch(user_controller+"/reset",{
method: 'POST',
body:user
}).then(() => {
disable('resetBtn');
setText('resetBtn','sending…');
fetch(user_controller+"/reset?user="+user).then(() => {
hide('login');
show('sent');
});

53
de.srsoftware.oidc.web/src/main/resources/en/scripts/reset.js Normal file
View File

@@ -0,0 +1,53 @@
const urlParams = new URLSearchParams(window.location.search);
const token = urlParams.get('token');
async function handlePasswordResponse(response){
if (response.ok){
console.log(response);
setText('passBtn', 'saved.');
if (response.redirected){
redirect(response.url);
}
} else {
setText('passBtn', 'Update failed!');
var text = await response.text();
if (text == 'invalid token') show('invalid_token');
if (text == 'token missing') show('missing_token');
if (text == 'password mismatch') show('password_mismatch');
if (text == 'weak password') show('weak_password');
}
enable('passBtn');
setTimeout(function(){
setText('passBtn','Update');
},10000);
}
function passKeyDown(ev){
if (event.keyCode == 13) updatePass();
}
function updatePass(){
disable('passBtn');
hide('missing_token');
hide('invalid_token');
hide('password_mismatch');
hide('weak_password');
var newData = {
newpass : [getValue('newpass1'),getValue('newpass2')],
token : token
}
fetch(user_controller+'/reset',{
method : 'POST',
headers : {
'Content-Type': 'application/json'
},
body : JSON.stringify(newData)
}).then(handlePasswordResponse);
setText('passBtn','sent…');
}
function missingToken(){
show('missing_token');
disable('passBtn');
}
if (!token) setTimeout(missingToken,100);

2
de.srsoftware.oidc.web/src/main/resources/en/scripts/settings.js
View File

@@ -138,4 +138,4 @@ function update(){
}
setTimeout(fillForm,100);
fetch("/api/email/settings").then(handleSettings);
fetch("/api/email/settings").then(handleSettings);

7
de.srsoftware.oidc.web/src/main/resources/en/scripts/users.js
View File

@@ -57,12 +57,9 @@ function remove(userId){
}
function reset_password(userid){
fetch(user_controller+"/reset",{
method: 'POST',
body:userid
}).then(() => {
fetch(user_controller+"/reset?user="+userid).then(() => {
disable('reset-'+userid);
});
}
fetch(user_controller+"/list",{method:'POST'}).then(handleUsers);
fetch(user_controller+"/list",{method:'POST'}).then(handleUsers);

3
de.srsoftware.oidc.web/src/main/resources/en/todo.html
View File

@@ -13,14 +13,13 @@
<h1>to do…</h1>
<ul>
<li><a href="users.html">Users: remove</a></li>
<li><a href="users.html">Users: send password reset link</a></li>
<li><a href="login.html">Login: send password reset link</a></li>
<li><a href="login.html">Login: "remember me" option</a></li>
<li>at_hash in ID Token</li>
<li>drop outdated sessions</li>
<li>invalidate tokens</li>
<li>implement token refresh</li>
<li>handle https correctly in PathHandler.hostname</li>
<li>bessere Implementierung für UserController.stron(pass), anwendung überall da wo passworte geändert werden können</li>
</ul>
</div>
</body>