Reset password form should has captcha

We need to apply few changes to user reset functionality:

1. We need to add captcha validation to password reset form.

• oxTrust should display current form without captcha if admin decided to not enable it (current flow)
• Show captcha if admin activated captcha config

1. Remove section of code which send mail to not register e-mails. We also need to remove related messages from message resource files.
2. Update message which we show after password reset If this email is associated with a user account in our system, you will receive an email with instructions to reset your password.

[willow9886]

@natt-tester

Also, I think a button taking the user back to the login page would be a nice enhancement. What do you think, @willow9886?

Can we tell what page they were trying to access, and make sure we send them back to the login page with the right redirect URI baked in?

Instead of sending them to a new page that says… “Please check your email…” would it be easier to just show a pop up message on the existing page?

Ideally its a good flow for the user, so something like this:

user --> app --> login (which, after success, would redirect back to the app, but since they don’t have password…) --> reset password --> click validation email --> set new password --> redirect back to login page with the original redirect URI set

[natt-tester]

@shekhar16, there’s no need for a new resetPasswordSucces page, just put the message in a pop-up still in passwordReminder.