Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🚀 Feature: Password recovery without required URL #6266

Open
2 tasks done
nuaiman opened this issue Sep 16, 2023 · 4 comments
Open
2 tasks done

🚀 Feature: Password recovery without required URL #6266

nuaiman opened this issue Sep 16, 2023 · 4 comments
Labels
enhancement New feature or request product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.

Comments

@nuaiman
Copy link

nuaiman commented Sep 16, 2023

🔖 Feature description

When I click forget password, I then enter my email. And I minimize my app.

Then I get an email with secrect code. Then I go back to my app. Enter the secrect code and new password.

Then I can again use my email and new password to authenticate normally.

🎤 Pitch

Hi, I recently developed my app with phone authentication. Then I switch to email auth.

I tried implementing password recovery it says I need to give required url.

I think, i should not have to deal with url in a mobile app as I can just minimize it and come back with secret key from the email.

👀 Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

@Haimantika Haimantika changed the title Password recovery without required URL🚀 Feature: 🚀 Feature: Password recovery without required URL Sep 18, 2023
@Megamannen
Copy link

Megamannen commented Sep 20, 2023

I have the same request and a suggestion for an easy solution.

Add the template variable {secret}. Then we can add our own email template without an URL and in the email.
The user can then copy the secret into the app (it's not a beautiful secret, but it's better than nothing)

@eldadfux eldadfux added product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services. feature labels Sep 23, 2023
@eldadfux
Copy link
Member

Thanks for raising this issue. Our team will examine it, please feel free to thumb it 👍 so we know how to prioritize it.

@stnguyen90
Copy link
Contributor

One way you can achieve this today is:

  1. Create a "Password Recovery Codes" collection with the following attributes:
    1. userId
    2. code
  2. Create a "Send Password Recovery Code" Appwrite Function that will
    1. accept an email address as input
    2. create a document in the Password Recovery Codes collection
    3. send an email to the user with the code
  3. Create a "Validate Password Recovery Code" Appwrite Function that will
    1. accept an email address, code, and new password
    2. lookup the code in the "Password Recovery Codes" collection
    3. validate the code with the email/userId
    4. validate the code is not too old
    5. set the user's new password

@examr
Copy link

examr commented Nov 2, 2023

I have the similar request, but I suggest allowing mobile app developers to use our project URL, which is https://cloud.appwrite.io/[project-id], as an input. With this, we can call the activity and use deeplinks on Android.

@stnguyen90 stnguyen90 added enhancement New feature or request and removed feature labels Mar 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.
Projects
None yet
Development

No branches or pull requests

5 participants