Does Bknd have a built-in forgot-password flow?

No, Bknd provides core hashing methods but requires you to implement the token generation and email logic manually, which this skill helps you automate.

Is it safe to set passwords directly in the Bknd UI?

No, editing the password field in the Admin UI sets a raw value. You must use the changePassword() method to ensure the password is encrypted using the configured hashing algorithm.

Can I use this for OAuth or Social login users?

No, password reset logic only applies to users using the 'password' strategy. Social login users manage credentials through their specific providers (e.g., Google, GitHub).

How do I prevent email enumeration with this skill?

The skill provides implementation patterns that return generic success messages regardless of whether an email exists, preventing attackers from discovering registered users.

Bknd Password Reset & Management

Name: Bknd Password Reset & Management
Author: cameronapak

bycameronapak

•

API 개발

Implements secure password reset flows, server-side hashing, and email token validation for Bknd applications.

소개

The Bknd Password Reset skill provides comprehensive guidance and implementation patterns for managing user credentials within the Bknd ecosystem. Since Bknd lacks a native 'forgot-password' flow, this skill bridges the gap by offering secure methods for server-side hashing, cryptographically safe token generation, and the creation of custom API endpoints for email-based recovery. It covers everything from admin-initiated resets to authenticated user password changes and critical security considerations like rate limiting and email enumeration prevention.

주요 기능

Secure reset token generation and lifecycle management
1 GitHub stars
Custom 'forgot password' API endpoint implementation patterns
React frontend components for reset requests and confirmation
Security best practices for rate limiting and OAuth protection
Server-side password hashing via changePassword() method

사용 사례

Implementing admin-level password overrides using backend scripts or custom endpoints
Allowing authenticated users to change their passwords within a profile dashboard
Building a production-ready 'Forgot Password' email recovery system

소개

주요 기능

Secure reset token generation and lifecycle management
1 GitHub stars
Custom 'forgot password' API endpoint implementation patterns
React frontend components for reset requests and confirmation
Security best practices for rate limiting and OAuth protection
Server-side password hashing via changePassword() method

사용 사례

Implementing admin-level password overrides using backend scripts or custom endpoints
Allowing authenticated users to change their passwords within a profile dashboard
Building a production-ready 'Forgot Password' email recovery system