Lost password plugin

I really miss the functionality for a user to create a new password if lost. I think this should be is the core, but until then, I’m searching for a plugin.

I know there are some forum threads about this with some manual solutions. But a plug-and-play-plugin would make things easier. But as a said, it should be in the core.

1 Like

has been asked before, a plugin exists and @texnixe suggested adding this to core as well. maybe a github issue exists – to lazy to look it up. :wink:

edit: oh nevermind you said you know about the older threads.

I wouldn’t use that plugin mentioned by @bnomei, I think you better go looking what @samnabi does in his Shopkit. We only have to find someone who wants to make that into a plugin… or wait for Kirby…

I know @bnomei that this has been asked before. I just wanted to have a fresh thread about this in this new #plugins:ideas section of the forum. This is such a basic functionality of a CMS that I’m really amazed that this is not part of the core yet.

The password reset function in Shopkit has 2 major components:

First, a function that adds a random token field to a user’s account file:

And second, a route that will accept that one-time use token, change the user’s password, log them in, and redirect them to change their password:

This is probably not easy to include by default into Kirby core for a few reasons:

  1. It requires a new /token route which could conflict with existing sites.
  2. It relies on creating and destroying token fields within the user’s account file, which could conflict with existing sites.
  3. Sending account tokens via email can introduce security risks if your outgoing mails are logged on the server. Kirby has no control over this.