Rest Password Reset

This module provides a way to request your username via email or to change your Drupal user password on a decoupled website via REST api endpoints. It builds on the core REST module and uses REST UI to further configure the custom endpoints provided by the module.

Features

The module provides 3 rest endpoints:

GET /user/username/{email address}
GET /user/password/{email address}
POST /user/password/reset

Your decoupled frontend is targeted by the second endpoint and you are supposed to provide a page in the frontend that offers the end user an option to provide a new password and then post the parameters provided by url arguments to your frontend to format a POST request to the backend via the 3rd endpoint.

Post-Installation

The module provides a multilangual form under Admin->Configuration->Web Services->Rest Password Reset
Also you are supposed to use REST ui module to activate the custom endpoints and give anonymous users access to them. Cookie authentication should also make sure your frontend app can GET and POST directly to the backend endpoints without needing to authenticate first as would be expected when an end user requests a new password or his or her username.

Additional Requirements

This module extends the rest Drupal core module and is purely intended for decoupled websites. a React frontend for example is a hard requirement.

Recommended modules/libraries

- rest (drupal core)
- rest ui (3rd party drupal module)

Disclaimer

There is also REST password request which uses a different approach and sends an email with a temporary password. This module attempts to follow the way a normal Drupal site works and therefor sends an email with a password reset link that points to a configurable endpoint in your decoupled frontend. By following that link you can then request a new password. The hashing algoritm used in the password reset link is the same as Drupal normally uses.