authgear / authgear/authgear-server

[Passkey, suggestion] Should update user flow for "Forgot Password" for user with only 1 passkey

Open
#2,342 0 comments 0 reactions 0 assignees View on GitHub
reported by qa ux/trivial
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

## Background:
- Device / Browser (OS version): Chrome on Mac
- Build: Version tag 2022-07-22.0

## Description:
For user with only 1 passkey, when they lost their passkey, they have no password to fallback to. They may not know that they need to click "Forgot password" to regain access.

## Steps to reproduce:
0. Use an app with passkey enabled.
1. Go to portal, Sign in with a user that has a passkey setup
2. Assume user has lost the passkey
3. They will be asked to enter password which they don't have.
4. User need to click "Forgot password" to proceed.

## Expected result:
Should updated user flow for "Forgot Password" when user lost the passkey. Say having a button "I have lost the passkey", allow them to re-verify via email to setup new passkey or setup a new password.

## Screenshot:
image

Contributor guide

Open the contributing guide

Research direction

Start at the portal sign-in flow and the existing "Forgot Password" entry point described in the reproduction steps. Define the lost-passkey recovery flow, including email re-verification and choosing a new passkey or password; done means a user with one lost passkey can regain access without an existing password.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.