Requirements
Component | Requirement | Comments |
---|---|---|
Airlock IAM | Airlock IAM 7.5 or newer. |
Component | Requirement | Comments |
---|---|---|
Airlock IAM | Airlock IAM 7.5 or newer. |
This example shows how to configure and use the Loginapp password reset REST API for a simple password reset – flow based on sending an OTP to the end-user via email.
All following procedures are exemplary and will vary according to your setup or needs.
The flow is configured as a public self-service flow:
Loginapp >> Public Self-Service Flows >> a flow implementing password reset.
The flow steps configured for this example and a high-level view of the REST calls is shown in the diagram below.
Note that there is a similar flow example in the demo configuration template.
Step | Purpose | Comment |
---|---|---|
A | Provide the name of the user for which the password reset flow should be executed. | This step is required to start the flow and to select the user. By default, this step will complete with 200 OK, even if the user cannot be found, the account is locked or invalid. This is done to provide protection against user enumeration attacks. To change this, adapt the configuration of the Default Password Reset Restrictions plugin or define your own password restriction settings using the plugin Custom Public Self-Service Restrictions. |
B | Send an OTP to the end user's email address and verify OTP entered by the end user. | |
C | Set a new password. | This step persists the new password if it passes the password policy. |
Response:
The email Email Identity Verification Step is automatically started and an email with an OTP token is sent to the user without waiting for user interaction.
The following alternative response indicates that the password policy was not met: