GraphQL: Reset user password with emailed token #7033

Activity

1. mtrezza

   added

   needs more info

   on Dec 2, 2020
2. mtrezza commented on Dec 2, 2020

   

   mtrezza

   on Dec 2, 2020

   Member

   More actions

   Thank you for reporting.

   @Moumouls Do you have any suggestion for this GraphQL related issue?
3. MichaelJCole commented on Dec 2, 2020

   

   MichaelJCole

   on Dec 2, 2020

   Last edited by MichaelJCole

   Author

   More actions

   Hi @Moumouls and @mtrezza, thank you for looking at this. Here's a recap of the flow (to organize my thoughts)

   1. Make GraphQL request to send email
   2. user clicks email link, and is redirected to a "choosePassword" custom page in my app. This "hop" validates the token and redirects to different custom pages. Still no new password yet.
   3. My custom choosePassword page gathers users input and requests a new password. It would make sense for me to use GraphQL for this, but with REST, it's the same code in the end.

   I think this test case is an example

   It looks like that REST route has two purposes depending on GET or POST:

     this.route(
         'POST',
         '/apps/:appId/request_password_reset',
         req => {
           this.setConfig(req);
         },
         req => {
           return this.resetPassword(req);
         }
       );
   
       this.route(
         'GET',
         '/apps/:appId/request_password_reset',
         req => {
           this.setConfig(req);
         },
         req => {
           return this.requestResetPassword(req);
         }
       );
   
4. Moumouls commented on Dec 2, 2020

   

   Moumouls

   on Dec 2, 2020

   Member

   More actions

   @MichaelJCole if i understand you try to set up custom account workflow via GraphQL without using the Parse Server pages (resetPassword page, verify email page).

   Currently the GraphQL API do not support this kind of mutation since many developers use auto managed Parse Server pages.

   But it looks like a good addition, we have many example into the GraphQL folder under userMutation file.
   I think the implementation could be easy !

   Would you like to start a quick PR ? (with the endpoint suggested into you other issue ? 😃 )

   👍React with 👍1Reacted by Manuel
5. Moumouls

   added

   type:featureNew feature or improvement of existing featureNew feature or improvement of existing feature

   on Dec 2, 2020
6. Moumouls

   changed the title [-]GraphQL API cannot reset users password.[/-] [+]GraphQL: Reset user password with emailed token[/+] on Dec 2, 2020
7. mtrezza

   removed

   needs more info

   on Dec 2, 2020
8. MichaelJCole commented on Dec 2, 2020

   

   MichaelJCole

   on Dec 2, 2020

   Last edited by MichaelJCole

   Author

   More actions

   Hi @Moumouls, thanks for the invite, I appreciate what you guys have done.

   My concerns with making a PR are:

   1. I just started using GraphQL and Parse a couple weeks ago
   2. Auth code needs to be tested, and I'm not familiar with the dev and test environments
   3. I'm on a small project and need to get some features done ASAP

   I got this to work using the existing API's, so I'll spend some time to make a documentation PR for the GraphQL and REST guides.

   For reference, here is how to complete the password reset with the REST API from the client:

       await axiosClient.post(
         `/parse/apps/${process.env.PARSE_SERVER_APPLICATION_ID}/request_password_reset`,
         `username=${encodeURIComponent(email)}&new_password=${encodeURIComponent(password)}&token=${encodeURIComponent(token)}`,
         {
           headers: {
             'X-Requested-With': 'XMLHttpRequest',
             'content-type': 'application/x-www-form-urlencoded',
           }
         }
       )
   
9. MichaelJCole

   added a commit that references this issue on Dec 2, 2020

   Update users.md

   ...

   3bec48d
10. davimacedo

    closed this as completedon Mar 29, 2021