implemented password reset link and sending via mail

Signed-off-by: Stephan Richter <s.richter@srsoftware.de>

de.srsoftware.oidc.web/src/main/resources/email.template/scratch.txt

@@ -0,0 +1,12 @@
+Password reset link for {service}
+Dear {displayname},
+
+Someone – probably you – requested to reset you password on {service}.
+
+If that was you, please open the following link in your browser:
+
+{link}
+
+If you *did not request* to reset you password, simply ignore this mail.
+
+Best wishes, you OIDC admin.

de.srsoftware.oidc.web/src/main/resources/en/authorization.html

@@ -22,6 +22,6 @@
         <button type="button" onclick="denyAutorization()">No</button>
     </div>
     <div id="error" class="error" style="display: none"></div>
-    <div id="missing_scopes" class="error" style="display: none">Authorization response contained neither list of <em>unauthorized scopes</em> nor list of <em>authorized scopes</em>! This is a server problem.</div>
+    <div id="missing_scopes" class="error" style="display: none">Authorization resource contained neither list of <em>unauthorized scopes</em> nor list of <em>authorized scopes</em>! This is a server problem.</div>
 </body>
 </html>

de.srsoftware.oidc.web/src/main/resources/en/reset_password.template.txt

@@ -0,0 +1,12 @@
+Password reset link for {service}
+Dear {displayname},
+
+Someone – probably you – requested to reset you password on {service}.
+
+If that was you, please open the following link in your browser:
+
+{link}
+
+If you *did not request* to reset you password, simply ignore this mail.
+
+Best wishes, you OIDC admin.

de.srsoftware.oidc.web/src/main/resources/en/todo.html

@@ -16,6 +16,11 @@
                 <li><a href="users.html">Users: send password reset link</a></li>
                 <li><a href="login.html">Login: send password reset link</a></li>
                 <li><a href="login.html">Login: "remember me" option</a></li>
+                <li>at_hash in ID Token</li>
+                <li>drop outdated sessions</li>
+                <li>invalidate tokens</li>
+                <li>implement token refresh</li>
+                <li>handle https correctly in PathHandler.hostname</li>
             </ul>
         </div>
     </body>