Beginnings of password reset

[randomairborne]

This needs to be made more robust, please review it.

Signed-off-by: valkyrie_pilot [email protected]

[hydrostaticcog]

Is this designed to be a Forgot my password? or a way to change your password?

[randomairborne]

Forgot my password. I can add another endpoint to simply check if you are who you are and then change your password, that's much simpler

[hydrostaticcog]

Design is flawed. User should verify their intent via email, then change their password

[tazz4843]

I can add another endpoint to simply check if you are who you are and then change your password, that's much simpler

That already exists under edit_user, so this password reset would just be for forgot password yes.

Design is flawed. User should verify their intent via email, then change their password

The two of us talked about it in DMs, and she brought up some good points about it. This design is a bit weird yes, but I agreed it's good.

[randomairborne]

Basically, we don't want to host a browser-oriented webpage on the API. Nothing with, say, an interface for changing your password. I do plan to remove the authorization requirement, so this can work as a forgot my password.

[hydrostaticcog]

Works as intended on endeavourOS Linux x86-64 (kernel 5.14.12)