Forgot password workflow

From the login screen, and user is able to click the "forgot password" link, and is directed through a workflow to reset their password.

Workflow Steps

• Forgot password link redirects user to forgot password page

• Forgot password page looks like attached "forgot password" wireframe

• When email address is entered and form is submitted successfully, user is shown a success alert modal that says:
  "An email with a password reset token has been sent to the email address you provided"

• When "OK" is pressed on the alert, the user is redirected to the login page

• When the user clicks on the reset password link in their email (or pastes it into their browser), they are shown the reset password page
  — CAN WE CHECK IF RESET TOKEN IS VALID

• Password reset page looks like wireframe

• Once password successfully reset, user is shown alert modal that reads:
  "Your password has been updated, please login"

• Once OK is pressed, the user is redirected to the login screen

Acceptance Criteria

• Workflow steps are actionable as specified

• A user's email address is checked for validity (ie has '@' symbol & ect) in the browser before being sent to the server — an inline form error is shown if not valid

• A user's new password is checked on client side that it was successfully re-entered — an inline form error is shown if not valid

• A user's new password is checked to meet the password formatting guidelines before being sent to the OpenLMIS server — an inline error is shown if not valid

• Any returned server error is displayed as a success alert modal