Forget Password Workflow

WorkFlow

1) A request for a new password is asked for. If the email address is not found a form error is returned. 2) If the email is found a forget password token is created with an expiration date. 3) Then we send an email out to the user giving them a link to reset their password.

This is all done in the forget password service and ForgetPasswordForm.

Reset password will basically save check the token and make sure that the token is valid and has not expired. If so it will let th user reset their password.

The workflow on for both api and website are the same. Minus return types and pages.