Skip to content

feat(auth): implement password reset recovery and lockout fixes#2951

Merged
crivetimihai merged 6 commits intomainfrom
pass-reset
Feb 15, 2026
Merged

feat(auth): implement password reset recovery and lockout fixes#2951
crivetimihai merged 6 commits intomainfrom
pass-reset

Conversation

@crivetimihai
Copy link
Copy Markdown
Member

Summary

  • implement self-service forgot/reset password APIs and admin UI flows
  • add one-time hashed password reset token model and Alembic migration
  • add SMTP-backed auth notification service and reset/confirmation/lockout email templates
  • fix lockout expiry behavior and add admin unlock API plus admin UI unlock action
  • add password recovery guide and emergency hash generation CLI
  • update auth metrics, schemas, config/docs, and manual auth testcase

Related Issues

Closes #2542
Closes #2543
Closes #2628

Add self-service forgot/reset password APIs and admin UI flows with one-time reset tokens, SMTP notifications, account unlock actions, lockout expiry fixes, metrics, migration, docs, and recovery tooling.

Closes #2542

Closes #2543

Closes #2628

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
@crivetimihai crivetimihai merged commit 89db1a4 into main Feb 15, 2026
54 checks passed
@crivetimihai crivetimihai deleted the pass-reset branch February 15, 2026 12:23
suciu-daniel pushed a commit that referenced this pull request Feb 16, 2026
* feat(auth): implement password reset and recovery workflows

Add self-service forgot/reset password APIs and admin UI flows with one-time reset tokens, SMTP notifications, account unlock actions, lockout expiry fixes, metrics, migration, docs, and recovery tooling.

Closes #2542

Closes #2543

Closes #2628

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* lint fixes

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Test coverage

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Fix password reset issues

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Rebase

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: mark hash_password utility executable

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
vishu-bh pushed a commit that referenced this pull request Feb 18, 2026
* feat(auth): implement password reset and recovery workflows

Add self-service forgot/reset password APIs and admin UI flows with one-time reset tokens, SMTP notifications, account unlock actions, lockout expiry fixes, metrics, migration, docs, and recovery tooling.

Closes #2542

Closes #2543

Closes #2628

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* lint fixes

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Test coverage

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Fix password reset issues

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Rebase

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: mark hash_password utility executable

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Signed-off-by: Vishu Bhatnagar <vishu.bhatnagar@ibm.com>
kcostell06 pushed a commit to kcostell06/mcp-context-forge that referenced this pull request Feb 24, 2026
…2951)

* feat(auth): implement password reset and recovery workflows

Add self-service forgot/reset password APIs and admin UI flows with one-time reset tokens, SMTP notifications, account unlock actions, lockout expiry fixes, metrics, migration, docs, and recovery tooling.

Closes IBM#2542

Closes IBM#2543

Closes IBM#2628

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* lint fixes

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Test coverage

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Fix password reset issues

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* Rebase

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

* fix: mark hash_password utility executable

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>

---------

Signed-off-by: Mihai Criveti <crivetimihai@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

1 participant