claude[bot] 6f7cf2fb16 feat: add password reset flow using configured SMTP settings (#7525) ...

* feat: add password reset flow using configured SMTP settings

Implements password reset functionality for users with email/password login:

Backend:
- Add `/auth/request_password_reset` endpoint to request a password reset email
- Add `/auth/reset_password` endpoint to reset password using token
- Add `/auth/is_smtp_configured` endpoint to check if SMTP is available
- Uses existing `magic_link` table for storing reset tokens
- Tokens expire after 1 hour
- Invalidates all existing sessions on password reset
- Includes audit logging

Frontend:
- Add "Forgot password?" link on login page (shown when SMTP is configured)
- Add `/user/forgot-password` page for requesting password reset
- Add `/user/reset-password` page for entering new password
- Both pages follow existing Windmill design patterns

Security:
- Always returns success response to prevent email enumeration
- Password must be at least 8 characters
- Uses argon2 for password hashing (same as existing login)

Closes #7524

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

* nits

* nits

* fix oss

* nits

* fix oss

---------

Co-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
Co-authored-by: HugoCasa <hugo@casademont.ch>
Co-authored-by: Ruben Fiszel <ruben@windmill.dev>

2026-01-09 10:31:56 +00:00

..

mcp

split out windmill-mcp + pin tokio-utils

2026-01-09 06:16:26 +00:00

triggers

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

agent_workers_oss.rs

fix(backend): concurrency limits preprocessor (#6727)

2025-10-02 20:31:31 +00:00

ai.rs

feat(ai): support IAM auth for bedrock provider (#7379)

2025-12-16 22:00:14 +00:00

approvals.rs

refactor: remove legacy database views v2_as_queue and v2_as_completed_job (#6689)

2025-11-04 13:08:02 +00:00

apps_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

apps.rs

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

args.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

assets.rs

Specific asset tables (#7323)

2025-12-11 13:34:17 +00:00

audit.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

auth.rs

count external jwts for telemetry

2025-11-18 23:03:35 +00:00

bedrock.rs

feat(ai): support IAM auth for bedrock provider (#7379)

2025-12-16 22:00:14 +00:00

capture.rs

feat(backend): pass all headers and query to webhook preprocessor (#6931)

2025-10-24 19:40:44 +00:00

concurrency_groups.rs

feat: triggers suspended mode (#7297)

2025-12-08 16:20:49 +00:00

configs.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

db.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

drafts.rs

use excluded where relevant

2025-10-16 09:19:44 +00:00

ee_oss.rs

count external jwts for telemetry

2025-11-18 23:03:35 +00:00

embeddings.rs

feat: hub actions and better search (#7056)

2025-11-05 11:10:48 +00:00

favorite.rs

remove unecessary postgres transactions and improve performance

2023-08-22 00:34:44 +02:00

flow_conversations.rs

feat(app): add chat component (#7199)

2025-11-24 17:39:35 +00:00

flows.rs

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

folder_history.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

folders.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

git_sync_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

granular_acls.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

group_history.rs

nit

2025-12-15 20:35:51 +00:00

groups.rs

fix: add history directly viewable in folder/group viewer (#7365)

2025-12-15 18:01:07 +00:00

indexer_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

inkeep_oss.rs

feat(mcp): add documentation endpoint (#7331)

2025-12-10 17:28:56 +00:00

inputs.rs

improve search perfs

2025-03-13 09:31:38 +01:00

integration.rs

feat: private hub (#3491)

2024-04-04 04:16:53 +02:00

job_helpers_oss.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

job_metrics.rs

backend: use v2 tables through views where possible (v2 phase 3) (#5119)

2025-02-06 12:43:24 +01:00

jobs_export.rs

nits jobs migration command

2025-12-01 15:16:22 +01:00

jobs.rs

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

lib.rs

upgrade rmcp crate (#7518)

2026-01-07 16:02:51 +00:00

live_migrations.rs

fix: improve jobs runs page performance (#6942)

2025-10-27 14:29:53 +00:00

oauth2_oss.rs

split oauth into separate crate

2026-01-09 07:03:29 +00:00

oidc_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

openapi.rs

feat: http routes streaming (#6834)

2025-10-17 14:05:17 +00:00

public_app_layer.rs

whitelist apps_u

2025-11-14 14:51:50 +00:00

raw_apps.rs

feat: granular token scopes (#6093)

2025-07-17 15:18:40 +00:00

resources.rs

split out windmill-mcp + pin tokio-utils

2026-01-09 06:16:26 +00:00

s3_proxy_oss.rs

fix s3 proxy dev build (#6535)

2025-09-04 22:05:22 +00:00

saml_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

schedule.rs

fix: improve jobs runs page performance (#6942)

2025-10-27 14:29:53 +00:00

scim_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

scopes.rs

feat(backend): flow streaming (#6520)

2025-09-18 15:49:35 +00:00

scripts.rs

feat: v2 job debouncing (#7411)

2025-12-23 13:24:04 +00:00

service_logs.rs

feat: add aws oidc support for instance s3 storage (#5810)

2025-05-25 14:03:38 +02:00

settings.rs

Fix data table creds setup (#7516)

2026-01-08 06:25:59 +00:00

slack_approvals.rs

feat: Better tracing for audit logs, including a graph to visualize them (#6078)

2025-07-03 21:02:45 +00:00

smtp_server_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

static_assets.rs

fix static assets loading for apps raw

2025-12-25 16:29:49 +00:00

stripe_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_approvals_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

teams_cache_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

teams_oss.rs

fix: teams api improvements (#6643)

2025-09-19 17:43:16 +00:00

token.rs

feat: email triggers (#6548)

2025-09-09 21:04:23 +00:00

tracing_init.rs

nit

2025-09-11 21:57:56 +00:00

users_oss.rs

feat: add password reset flow using configured SMTP settings (#7525)

2026-01-09 10:31:56 +00:00

users.rs

feat: add password reset flow using configured SMTP settings (#7525)

2026-01-09 10:31:56 +00:00

utils.rs

Advanced S3 permissionning (#6617)

2025-09-17 12:15:33 +00:00

var_resource_cache.rs

add variable caching api

2025-09-02 14:34:46 +00:00

variables.rs

fix(backend): add presigned url support for object storage (#7328)

2025-12-10 15:35:26 +00:00

webhook_util.rs

feat: allow optionally forcing ipv4 for reqwest (#6883)

2025-10-21 15:46:41 +00:00

workers.rs

feat(security): unshare pid of worker job process (#7106)

2025-11-18 23:04:31 +00:00

workspace_dependencies.rs

fix(workspace-dependencies): implement better caching (#7273)

2025-12-02 12:48:14 +00:00

workspaces_export.rs

feat(internal): runnable settings (#7298)

2025-12-16 21:17:06 +00:00

workspaces_extra.rs

fix: make workspace id change faster and add 100k jobs limit (#7500)

2026-01-06 18:07:51 +00:00

workspaces_oss.rs

EE Refactor (#5844)

2025-06-02 22:12:33 +02:00

workspaces.rs

feat: raw apps can be built by agents fully locally (#7448)

2025-12-24 21:00:04 +00:00