Account Recovery
Password reset flow is ready for implementation
The auth module already supports password-reset tokens on the server, and this page is the front-end entry point that will host the final form.
Email-based reset requests
Secure one-hour reset tokens
Silent handling to avoid account enumeration