PostERG/xamxam
1
0
Fork 0
mirror of https://codeberg.org/PostERG/xamxam.git synced 2026-09-25 01:53:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

add password-reset flow: request endpoint + reset page + login link (shared OneTimeToken)

Browse Source
This commit is contained in:
Pontoporeia
2026-08-24 11:36:02 +02:00
parent d7184e4447
commit ddae5d8fef
7 changed files with 269 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/templates/admin/login.php
+5
View File
@@ -14,6 +14,11 @@
<button type="submit" class="btn btn--primary">Se connecter</button>
</div>
</form>
<form method="post" action="/admin/request-reset.php" class="admin-form" style="margin-top:var(--space-s)">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token'] ?? '') ?>">
<button type="submit" class="btn btn--muted">Mot de passe oublié ?</button>
</form>
</div>
</div>
</main>
app/templates/admin/password-reset.php
+29
View File
@@ -0,0 +1,29 @@
<main id="main-content">
<div class="admin-login-wrap">
<div class="admin-login-box">
<h2>Nouveau mot de passe</h2>
<?php if ($error): ?>
<p class="toast" role="alert" data-type="error">⚠ <?= htmlspecialchars($error) ?></p>
<?php endif; ?>
<form method="post" action="/admin/password-reset.php" class="admin-form" autocomplete="off">
<input type="hidden" name="csrf_token" value="<?= htmlspecialchars($_SESSION['csrf_token'] ?? '') ?>">
<input type="hidden" name="token" value="<?= htmlspecialchars($token) ?>">
<div>
<label for="new_password">Nouveau mot de passe</label>
<input type="password" id="new_password" name="new_password" required minlength="12" autocomplete="new-password" autofocus>
<small>Minimum 12 caractères.</small>
</div>
<div>
<label for="confirm_password">Confirmer le mot de passe</label>
<input type="password" id="confirm_password" name="confirm_password" required minlength="12" autocomplete="new-password">
</div>
<div class="admin-form-footer">
<button type="submit" class="btn btn--primary">Enregistrer le mot de passe</button>
</div>
</form>
<p class="admin-cancel-link" style="margin-top:var(--space-s);text-align:center">
<a href="/admin/login.php">Retour à la connexion</a>
</p>
</div>
</div>
</main>