{"id":486,"date":"2024-07-31T20:22:32","date_gmt":"2024-07-31T20:22:32","guid":{"rendered":"https:\/\/www.kindsonthegenius.com\/spring-boot\/?p=486"},"modified":"2024-08-02T13:21:42","modified_gmt":"2024-08-02T13:21:42","slug":"spring-boot-password-reset","status":"publish","type":"post","link":"https:\/\/kindsonthegenius.com\/spring-boot\/spring-boot-password-reset\/","title":{"rendered":"Spring Boot \u2013 Password Reset"},"content":{"rendered":"

In this tutorial, you will learn how to implement Forget Password functionality in your SpringBoot application.<\/p>\n

\"Spring<\/a>
Spring Boot User Password Reset Workflow<\/figcaption><\/figure>\n

The Password Reset Flow<\/strong><\/p>\n

    \n
  1. From the login page, the user clicks on the ‘Forgot Password’<\/em> link.<\/li>\n
  2. The request hits the \/forgotPassword route in the SecurityController<\/li>\n
  3. The forgotPassword.html<\/em> template (which is in the security directory) is returned to the user. This template has a form with a single email field.<\/li>\n
  4. User enters his email and submits the form.<\/li>\n
  5. This new request arrives via the \/passwordRequest<\/em> route in the PasswordResetController<\/li>\n
  6. The forgottenPassword(email) is invoked with the passed in user’s email<\/li>\n
  7. If and email exists, then a token is generated and send along to the user via a password reset email<\/li>\n
  8. User receives the email and clicks on the link in the email<\/li>\n
  9. The request arrives via the \/passwordChange<\/em> route in the PasswordResetController<\/li>\n
  10. The changePassword() method sends the user the password reset form along with the token. This form contains two fields: newPassword and confirmPassword<\/li>\n
  11. User fills the form and submits via the \/passwordChange route<\/li>\n
  12. The updatePassword is called with the password and token and the user data is saved<\/li>\n
  13. The user is redirected to the passwordChangeSuccessful page<\/li>\n<\/ol>\n

     <\/p>\n

    Showing the\u00a0 Forgot Password Form<\/strong><\/h3>\n

    Step 1 – Setup the \/forgotPassword<\/em> route<\/strong><\/p>\n

    This is the first endpoint that would be hit when a user clicks on the Forgot Password<\/em> link in the login form where the user must enter his email or username.<\/p>\n

      \n
    1. Add the\u00a0 forgotPassword()<\/em> method to the SecurityController<\/li>\n<\/ol>\n
      @GetMapping<\/span>(<\/span>\"\/forgotPassword\"<\/span>)<\/span>\r\npublic<\/span> String forgotPassword<\/span>(){<\/span>\r\n   return<\/span> \"security\/forgotPassword\"<\/span>;<\/span>\r\n}<\/span>\r\n<\/pre>\n
       <\/p>\n
      2. Create the forgotPassword.html<\/em> <\/a>template in the security folder. This is the template that displays a form for use to enter his email. Get it here<\/a>.<\/p>\n
      3. Update the AppSecurityConfig to allow the \/forgotPassword<\/em> route<\/p>\n
      4. Test(1)<\/strong> the \/forgotPassword<\/em> route<\/p>\n
       <\/p>\n
      Sending the ForgetPassword Email<\/strong><\/h3>\n
      Step 2 – Create the ForgotPasswordEmailContext<\/strong><\/p>\n
      This would be similar to the AccountVerificationEmail context but for password reset request. It will extend AbstractEmailContext.<\/p>\n
      The difference would be that it would use the forgot-password template from the mailing folder.\u00a0 Do the following:<\/p>\n