Skip to main content

​
Real-World Example

Maya forgets her EcoMail Hub / EcoPortal password. She requests a reset link using her registered email address, opens the reset link, enters a new confirmed password, and returns to login.

​
Visual Flow

​
How It Should Work

  • It should use the EcoMail Hub / EcoPortal password broker.
  • It should throttle repeated reset-link requests.
  • It should require a valid reset token, email, password, and confirmation.
  • It should redirect the user back to login after a successful reset.

​
How It Should Not Work

  • It should not reset a creditor, consumer, or Super Admin password.
  • It should not allow unlimited reset requests from the same email/IP pair.
  • It should not accept weak or unconfirmed passwords.

​
Developer Notes

  • Forgot password stores the entered email so the reset request flow can stay smooth.
  • Reset password hashes the new password and rotates the remember token.
  • routes/ecomailhub/auth.php
  • app/Livewire/ConsumerResponseManager/Auth/ForgotPasswordPage.php
  • app/Livewire/ConsumerResponseManager/Auth/ResetPasswordPage.php
  • app/Livewire/ConsumerResponseManager/Forms/ForgotPasswordForm.php
  • app/Livewire/ConsumerResponseManager/Forms/ResetPasswordForm.php
Last modified on May 26, 2026