Real-World Example
A Super Admin user forgets their password before reviewing merchant requests. They request a reset link, set a new password, and then sign in again with the new password.
Visual Flow
How It Should Work
- It should send reset instructions for valid Super Admin accounts.
- It should require a confirmed password that follows system password rules.
- It should allow login with the new password after reset.
How It Should Not Work
- It should not reset a creditor or EcoMail Hub / EcoPortal password from the Super Admin reset flow.
- It should not accept weak or unconfirmed passwords.
- It should not allow unlimited reset attempts in a short period.
Developer Notes
- Keep password reset behavior on the Super Admin guard.
- Do not reuse creditor reset messaging if it creates portal confusion.
routes/superadmin/auth.phpapp/Livewire/SuperAdmin/Auth/ForgotPasswordPage.phpapp/Livewire/SuperAdmin/Auth/ResetPasswordPage.php
Last modified on May 26, 2026
