#springboot #springsecurity #passwordreset #java #programming #javadeveloper #programmingshorts

Key Takeaways

So when the user is interested in the password reset feature first it has to get the reset token. All right. So once the user got the reset token the next step would be to actually reset the password. And for that we will expose another endpoint which is / API/reset password. When the user hits this endpoint it has to provide the password which is the new password and the token which it got from the step number two. And from the controller the system will validate the token if this token is a valid token. All right. the token has not been expired, has not been consumed, has not been reused. That kind of validation we can implement in this flow. So once we validate the token, once the system knows that this is a valid reset token, then the system would allow the user to reset the password, the new password will be stored in the database. And once the new password is stored in the database, the user can use that username and password. Basically, the new password to authenticate itself. All right. So the main thing here is to understand that this is going to be a two-step process.