User Story #3744
Updated by Khadija Mezghani about 1 month ago
As a user, I want to reset my password, so that I can regain access if I forget my credentials.
Acceptance Criteria:
-Reset request
The user can enter their email in the "forgot password" form.
A reset email is sent if an account exists for that email.
A confirmation message is shown regardless of whether the account exists, to avoid revealing account existence.
-Reset link
The user receives a reset link by email, valid for a limited time.
The link redirects to a new-password page.
-Password change
The user sets and confirms a new password.
The password must meet the platform's complexity rules.
The password is updated, and a confirmation message is shown.
-Invalid or expired link
If the link is expired, already used, or invalid,
Then access is refused and an error message invites the user to request a new one.
"Note: US01, US02, US03 & US08 are pushed by the same ID #3752"