Post-Tyranny-Tech-Infrastru.../ansible/playbooks
Pieter fcc5b7bca2 feat: Add password recovery flow with email notifications
ACHIEVEMENT: Password recovery via email is now fully working! 🎉

Implemented a complete password recovery flow that:
- Asks users for their email address
- Sends a recovery link via Mailgun SMTP
- Allows users to set a new password
- Expires recovery links after 30 minutes

Flow stages:
1. Identification stage - collects user email
2. Email stage - sends recovery link
3. Prompt stage - collects new password
4. User write stage - updates password

Features:
✓ Email sent via Mailgun (noreply@mg.vrije.cloud)
✓ 30-minute token expiry for security
✓ Set as default recovery flow in brand
✓ Clean, user-friendly interface
✓ Password confirmation required

Users can access recovery at:
https://auth.dev.vrije.cloud/if/flow/default-recovery-flow/

Files added:
- recovery-flow.yaml - Blueprint defining the complete flow
- update-recovery-flow.yml - Deployment playbook

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-15 13:36:43 +01:00
..
cleanup.yml fix: Resolve Authentik email delivery issues 2026-01-13 09:52:23 +01:00
deploy.yml fix: Restore Mailgun SMTP and Nextcloud OIDC integration 2026-01-14 16:04:00 +01:00
setup.yml Complete Ansible base configuration (#2) 2025-12-27 14:13:15 +01:00
update-enrollment-flow.yml feat: Add playbook to update enrollment flow and fix brand default 2026-01-15 13:29:26 +01:00
update-recovery-flow.yml feat: Add password recovery flow with email notifications 2026-01-15 13:36:43 +01:00