searls-auth 0.2.0 → 1.0.1

data/app/controllers/searls/auth/requests_password_resets_controller.rb

@@ -0,0 +1,55 @@
+module Searls
+  module Auth
+    class RequestsPasswordResetsController < BaseController
+      before_action :ensure_password_reset_enabled
+      before_action :clear_email_otp_from_session!, only: [:show, :create]
+
+      def show
+        render Searls::Auth.config.password_reset_request_view, layout: Searls::Auth.config.layout
+      end
+
+      def create
+        email = params[:email].to_s.strip
+        user = Searls::Auth.config.user_finder_by_email.call(email)
+
+        if proceed_with_password_reset_request?(user) && deliverable_user?(user)
+          Searls::Auth::DeliversPasswordReset.new.deliver(
+            user:,
+            redirect_path: params[:redirect_path],
+            redirect_subdomain: params[:redirect_subdomain]
+          )
+        end
+
+        flash[:notice] = Searls::Auth.config.resolve(:flash_notice_after_password_reset_email, params)
+        redirect_to searls_auth.password_reset_request_path(
+          email: email,
+          redirect_path: params[:redirect_path],
+          redirect_subdomain: params[:redirect_subdomain]
+        )
+      end
+
+      private
+
+      def ensure_password_reset_enabled
+        return if Searls::Auth.config.password_reset_enabled?
+
+        flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_password_reset_not_enabled, params)
+        redirect_to searls_auth.login_path(
+          redirect_path: params[:redirect_path],
+          redirect_subdomain: params[:redirect_subdomain]
+        )
+        nil
+      end
+
+      def deliverable_user?(user)
+        return false if user.blank?
+        Searls::Auth.config.password_present?(user)
+      end
+
+      def proceed_with_password_reset_request?(user)
+        result = Searls::Auth.config.before_password_reset.call(user, params, self)
+        !(result == false || result == :halt)
+      end
+    end
+  end
+end

data/app/controllers/searls/auth/resets_passwords_controller.rb

@@ -0,0 +1,73 @@
+module Searls
+  module Auth
+    class ResetsPasswordsController < BaseController
+      before_action :ensure_password_reset_enabled
+      before_action :load_user_from_token
+      before_action :clear_email_otp_from_session!, only: [:show, :update]
+
+      def show
+        @token = params[:token]
+        @user_email = @user.email
+        render Searls::Auth.config.password_reset_edit_view, layout: Searls::Auth.config.layout
+      end
+
+      def update
+        result = ResetsPassword.new.reset(
+          user: @user,
+          password: params[:password],
+          password_confirmation: params[:password_confirmation]
+        )
+
+        if result.success?
+          handle_successful_reset(result.user)
+        else
+          flash.now[:alert] = Array(result.errors).first
+          @token = params[:token]
+          @user_email = @user.email
+          render Searls::Auth.config.password_reset_edit_view, layout: Searls::Auth.config.layout, status: :unprocessable_content
+        end
+      end
+
+      private
+
+      def ensure_password_reset_enabled
+        return if Searls::Auth.config.password_reset_enabled?
+
+        flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_password_reset_not_enabled, params)
+        redirect_to searls_auth.login_path(
+          redirect_path: params[:redirect_path],
+          redirect_subdomain: params[:redirect_subdomain]
+        )
+        nil
+      end
+
+      def load_user_from_token
+        token = params[:token].to_s
+        @user = Searls::Auth.config.password_reset_token_finder.call(token)
+        return if @user.present?
+
+        flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_password_reset_token_invalid, params)
+        redirect_to searls_auth.password_reset_request_path(
+          redirect_path: params[:redirect_path],
+          redirect_subdomain: params[:redirect_subdomain]
+        )
+        nil
+      end
+
+      def handle_successful_reset(user)
+        flash[:notice] = Searls::Auth.config.resolve(:flash_notice_after_password_reset, user, params)
+
+        if Searls::Auth.config.auto_login_after_password_reset
+          session[:user_id] = user.id
+          session[:has_logged_in_before] = true
+          redirect_after_login(user)
+        else
+          redirect_to searls_auth.login_path(
+            redirect_path: params[:redirect_path],
+            redirect_subdomain: params[:redirect_subdomain]
+          )
+        end
+      end
+    end
+  end
+end

data/app/controllers/searls/auth/settings_controller.rb

@@ -0,0 +1,83 @@
+module Searls
+  module Auth
+    class SettingsController < BaseController
+      before_action :ensure_password_auth_enabled
+      before_action :ensure_authenticated_user
+      before_action :load_settings_user
+
+      helper_method :settings_user, :password_on_file?
+
+      def edit
+        render :edit, layout: Searls::Auth.config.layout
+      end
+
+      def update
+        permitted_params = settings_params.to_h
+        result = UpdatesSettings.new(
+          user: settings_user,
+          params: permitted_params
+        ).update
+
+        @settings_user = result.user
+        @password_on_file = nil
+
+        if result.success?
+          flash[:notice] = Searls::Auth.config.resolve(:flash_notice_after_settings_update, settings_user, params)
+        else
+          # Normally, we would flash.now and render `settings_view`, but this controller is
+          # intended to back forms hosted elsewhere. Redirecting keeps the host UI in control
+          # while surfacing validation errors via the session flash.
+          flash[:alert] = Array(result.errors).compact_blank.first
+        end
+        redirect_target = Searls::Auth.config.resolve(
+          :redirect_path_after_settings_change,
+          settings_user, params, request, searls_auth
+        ) || searls_auth.edit_settings_path
+        redirect_to redirect_target
+      end
+
+      private
+
+      def ensure_password_auth_enabled
+        return if Searls::Auth.config.auth_methods.include?(:password)
+
+        head :not_found
+        nil
+      end
+
+      def ensure_authenticated_user
+        return if session[:user_id].present?
+
+        redirect_to searls_auth.login_path(
+          redirect_path: request.original_fullpath,
+          redirect_subdomain: request.subdomain
+        )
+        nil
+      end
+
+      def load_settings_user
+        @settings_user = Searls::Auth.config.user_finder_by_id.call(session[:user_id])
+        return if @settings_user.present?
+
+        session.delete(:user_id)
+        redirect_to searls_auth.login_path(
+          redirect_path: request.original_fullpath,
+          redirect_subdomain: request.subdomain
+        )
+        nil
+      end
+
+      attr_reader :settings_user
+
+      def password_on_file?
+        @password_on_file ||= settings_user && Searls::Auth.config.password_present?(settings_user)
+      end
+
+      def settings_params
+        permitted = [:password, :password_confirmation, :current_password]
+
+        params.fetch(:settings, ActionController::Parameters.new).permit(permitted)
+      end
+    end
+  end
+end

data/app/controllers/searls/auth/verifications_controller.rb

@@ -1,93 +1,63 @@
 module Searls
   module Auth
     class VerificationsController < BaseController
-      before_action :reset_expired_short_code
+      before_action :reset_expired_email_otp
 
       def show
-        render searls_auth_config.verify_view, layout: searls_auth_config.layout
+        if !(Searls::Auth.config.auth_methods & [:email_link, :email_otp]).any?
+          redirect_to searls_auth.login_path(**forwardable_params)
+        else
+          render Searls::Auth.config.verify_view, layout: Searls::Auth.config.layout
+        end
       end
 
       def create
         auth_method = params[:short_code].present? ? :email_otp : :email_link
-        if auth_method == :email_otp && !searls_auth_config.auth_methods.include?(:email_otp)
-          flash[:error] = searls_auth_config.resolve(:flash_error_after_verify_attempt_invalid_link, params)
-          return redirect_to searls_auth.login_path(
-            redirect_path: params[:redirect_path],
-            redirect_subdomain: params[:redirect_subdomain]
-          )
+        if auth_method == :email_otp && !Searls::Auth.config.auth_methods.include?(:email_otp)
+          flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_verify_attempt_invalid_link, params)
+          return redirect_to searls_auth.login_path(**forwardable_params)
         end
-        if auth_method == :email_link && !searls_auth_config.auth_methods.include?(:email_link)
-          flash[:error] = searls_auth_config.resolve(:flash_error_after_verify_attempt_invalid_link, params)
-          return redirect_to searls_auth.login_path(
-            redirect_path: params[:redirect_path],
-            redirect_subdomain: params[:redirect_subdomain]
-          )
+        if auth_method == :email_link && !Searls::Auth.config.auth_methods.include?(:email_link)
+          flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_verify_attempt_invalid_link, params)
+          return redirect_to searls_auth.login_path(**forwardable_params)
         end
         authenticator = AuthenticatesUser.new
         result = case auth_method
         when :email_otp
-          log_short_code_verification_attempt!
-          authenticator.authenticate_by_short_code(params[:short_code], session)
+          log_email_otp_verification_attempt!
+          authenticator.authenticate_by_email_otp(params[:short_code], session)
         when :email_link
           authenticator.authenticate_by_token(params[:token])
         end
 
         if result.success?
+          if [:email_otp, :email_link].include?(auth_method)
+            unless Searls::Auth.config.email_verified_predicate.call(result.user)
+              Searls::Auth.config.email_verified_setter.call(result.user)
+            end
+          end
           session[:user_id] = result.user.id
           session[:has_logged_in_before] = true
-          flash[:notice] = searls_auth_config.resolve(
-            :flash_notice_after_verification,
-            result.user, params
-          )
-          if params[:redirect_subdomain].present? && params[:redirect_subdomain] != request.subdomain
-            redirect_to generate_full_url(
-              params[:redirect_path],
-              params[:redirect_subdomain]
-            ), allow_other_host: true
-          elsif params[:redirect_path].present?
-            redirect_to params[:redirect_path]
+          flash[:notice] = Searls::Auth.config.resolve(:flash_notice_after_login, result.user, params)
+          if (target = target_redirect_url)
+            redirect_with_host_awareness(target)
           else
-            redirect_to searls_auth_config.resolve(:default_redirect_path_after_login,
-              result.user, params, request, main_app)
+            redirect_to Searls::Auth.config.resolve(:redirect_path_after_login, result.user, params, request, main_app)
           end
         elsif auth_method == :email_otp
-          if result.exceeded_short_code_attempt_limit?
-            clear_short_code_from_session!
-            flash[:error] = searls_auth_config.resolve(
-              :flash_error_after_verify_attempt_exceeds_limit,
-              params
-            )
-            redirect_to searls_auth.login_path(
-              redirect_path: params[:redirect_path],
-              redirect_subdomain: params[:redirect_subdomain]
-            )
+          if result.exceeded_email_otp_attempt_limit?
+            clear_email_otp_from_session!
+            flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_verify_attempt_exceeds_limit, params)
+            redirect_to searls_auth.login_path(**forwardable_params)
           else
-            flash[:error] = searls_auth_config.resolve(
-              :flash_error_after_verify_attempt_incorrect_short_code,
-              params
-            )
-            render searls_auth_config.verify_view, layout: searls_auth_config.layout, status: :unprocessable_entity
+            flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_verify_attempt_incorrect_email_otp, params)
+            render Searls::Auth.config.verify_view, layout: Searls::Auth.config.layout, status: :unprocessable_content
           end
         else
-          flash[:error] = searls_auth_config.resolve(
-            :flash_error_after_verify_attempt_invalid_link,
-            params
-          )
-          redirect_to searls_auth.login_path(
-            redirect_path: params[:redirect_path],
-            redirect_subdomain: params[:redirect_subdomain]
-          )
+          flash[:alert] = Searls::Auth.config.resolve(:flash_error_after_verify_attempt_invalid_link, params)
+          redirect_to searls_auth.login_path(**forwardable_params)
         end
       end
-
-      private
-
-      def generate_full_url(path, subdomain)
-        port = request.port
-        port_string = (port == 80 || port == 443) ? "" : ":#{port}"
-
-        "#{request.protocol}#{subdomain}.#{request.domain}#{port_string}#{path}"
-      end
     end
   end
 end

data/app/helpers/searls/auth/application_helper.rb

@@ -25,6 +25,14 @@ module Searls
         routes.register_url(forwardable_params.merge(kwargs))
       end
 
+      def password_reset_request_path(**kwargs)
+        routes.password_reset_request_path(forwardable_params.merge(kwargs))
+      end
+
+      def password_reset_available?
+        Searls::Auth.config.password_reset_enabled?
+      end
+
       def login_stimulus_controller
         "searls-auth-login"
       end
@@ -64,11 +72,7 @@ module Searls
       private
 
       def forwardable_params
-        {
-          email: params[:email],
-          redirect_path: params[:redirect_path],
-          redirect_subdomain: params[:redirect_subdomain]
-        }.compact_blank
+        @view_context.forwardable_params
       end
 
       def params

data/app/mailers/searls/auth/base_mailer.rb

@@ -1,6 +1,6 @@
 module Searls
   module Auth
-    class BaseMailer < ApplicationMailer # TODO should this be ActionMailer::Base? Trade-offs?
+    class BaseMailer < ApplicationMailer
       helper Searls::Auth::ApplicationHelper
       include Searls::Auth::ApplicationHelper
 

data/app/mailers/searls/auth/email_verification_mailer.rb

@@ -0,0 +1,29 @@
+module Searls
+  module Auth
+    class EmailVerificationMailer < BaseMailer
+      def verification_email
+        @config = Searls::Auth.config
+        @user = params[:user]
+        @token = params[:token]
+        @redirect_path = params[:redirect_path]
+        @redirect_subdomain = params[:redirect_subdomain]
+
+        mail(
+          to: format_to(@user),
+          subject: mail_subject,
+          template_path: @config.mail_email_verification_template_path,
+          template_name: @config.mail_email_verification_template_name
+        ) do |format|
+          format.html { render layout: @config.mail_layout }
+          format.text
+        end
+      end
+
+      private
+
+      def mail_subject
+        "Verify your #{searls_auth_helper.rpad(@config.app_name)}email"
+      end
+    end
+  end
+end

data/app/mailers/searls/auth/login_link_mailer.rb

@@ -7,7 +7,7 @@ module Searls
         @token = params[:token]
         @redirect_path = params[:redirect_path]
         @redirect_subdomain = params[:redirect_subdomain]
-        @short_code = params[:short_code]
+        @email_otp = params[:email_otp]
 
         mail(
           to: format_to(@user),
@@ -24,8 +24,8 @@ module Searls
 
       def mail_subject
         methods = Searls::Auth.config.auth_methods
-        if methods.include?(:email_otp) && @short_code.present?
-          "Your #{searls_auth_helper.rpad(@config.app_name)}login code is #{@short_code}"
+        if methods.include?(:email_otp) && @email_otp.present?
+          "Your #{searls_auth_helper.rpad(@config.app_name)}login code is #{@email_otp}"
         else
           "Your #{searls_auth_helper.rpad(@config.app_name)}login link"
         end

data/app/mailers/searls/auth/password_reset_mailer.rb

@@ -0,0 +1,29 @@
+module Searls
+  module Auth
+    class PasswordResetMailer < BaseMailer
+      def password_reset
+        @config = Searls::Auth.config
+        @user = params[:user]
+        @token = params[:token]
+        @redirect_path = params[:redirect_path]
+        @redirect_subdomain = params[:redirect_subdomain]
+
+        mail(
+          to: format_to(@user),
+          subject: mail_subject,
+          template_path: @config.mail_password_reset_template_path,
+          template_name: @config.mail_password_reset_template_name
+        ) do |format|
+          format.html { render layout: @config.mail_layout }
+          format.text
+        end
+      end
+
+      private
+
+      def mail_subject
+        "Reset your #{searls_auth_helper.rpad(@config.app_name)}password"
+      end
+    end
+  end
+end

data/app/views/searls/auth/email_verification_mailer/verification_email.html.erb

@@ -0,0 +1,23 @@
+<%= content_for :width, 480 %>
+<p>
+  <% if (user_name = searls_auth_helper.attr_for(@user, @config.user_name_method)).present? %>
+    Hello, <strong><%= user_name %></strong>!
+  <% else %>
+    Hello!
+  <% end %>
+</p>
+<p style="margin-top: 1rem;">
+  Please verify your email address to keep your account secure:
+  <div style="margin-top: 2rem; text-align: center;">
+    <%= link_to searls_auth.verify_email_url({
+      token: @token,
+      redirect_path: @redirect_path,
+      redirect_subdomain: @redirect_subdomain
+    }.compact_blank) do %>
+      <span style="width: 70%; box-shadow: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -2px rgba(0, 0, 0, 0.05); display: inline-block; padding-left: 2rem; padding-right: 2rem; padding-top: 1rem; padding-bottom: 1rem; font-size: 1.5rem; font-weight: 700; border-radius: 0.75rem; background-color: <%= @config.email_button_color %>; color: white;">Verify email address</span>
+    <% end %>
+  </div>
+</p>
+<p style="margin-top: 2rem; font-size: 0.875rem; color: #6b7280;">
+  If you didn't create an account or change your email, you can ignore this message.
+</p>

data/app/views/searls/auth/email_verification_mailer/verification_email.text.erb

@@ -0,0 +1,6 @@
+Hello<% if (user_name = searls_auth_helper.attr_for(@user, @config.user_name_method)).present? %>, <%= user_name %><% end %>!
+
+Verify your email using this link:
+<%= searls_auth.verify_email_url({ token: @token, redirect_path: @redirect_path, redirect_subdomain: @redirect_subdomain }.compact_blank) %>
+
+If you didn't ask for this, you can ignore this email.

data/app/views/searls/auth/login_link_mailer/login_link.html.erb

@@ -6,7 +6,7 @@
       Hello!
     <% end %>
   </p>
-<% if Searls::Auth.config.auth_methods.include?(:email_link) %>
+<% if @config.auth_methods.include?(:email_link) %>
   <p style="margin-top: 1rem;">
     You can log in by clicking this button:
     <div style="margin-top: 2rem; text-align: center;">
@@ -18,17 +18,17 @@
         <span style="width: 70%; box-shadow: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -2px rgba(0, 0, 0, 0.05); display: inline-block; padding-left: 2rem; padding-right: 2rem; padding-top: 1rem; padding-bottom: 1rem; font-size: 1.5rem; font-weight: 700; border-radius: 0.75rem; background-color: <%= @config.email_button_color %>; color: white;">Log in</span>
       <% end %>
       <div style="margin-top: 0.5rem; font-size: 0.875rem; color: #6b7280;">
-        (This link will expire in <%= @config.token_expiry_minutes %> minutes.)
+        (This link expires soon, so we recommend using it right away.)
       </div>
     </div>
   </p>
 <% end %>
-<% if Searls::Auth.config.auth_methods.include?(:email_otp) && @short_code.present? %>
+<% if @config.auth_methods.include?(:email_otp) && @email_otp.present? %>
   <p style="margin-top: 2rem;">
     You can log in by entering this code:
     <div style="margin-top: 2rem; text-align: center;">
       <span id="one-time-code" style="width: 70%; display: inline-block; padding-left: 2rem; padding-right: 2rem; padding-top: 1rem; padding-bottom: 1rem; font-size: 1.5rem; font-weight: 700; border: 1px solid; border-radius: 0.75rem; background-color: #f3f4f6; border-color: #e5e7eb;">
-        <%= @short_code %>
+        <%= @email_otp %>
       </span>
       <div style="margin-top: 0.5rem; font-size: 0.875rem; color: #6b7280;">
         (So will this code.)
@@ -37,5 +37,5 @@
   </p>
 <% end %>
 <p style="margin-top: 2rem; font-size: 0.875rem; color: #6b7280;">
-  p.s. Didn't try to log in? You can safely ignore this email. If this keeps happening, please <%= link_to "let us know", "mailto:#{@config.support_email_address}" %>.
+  p.s. Didn't try to log in? You can safely ignore this email.
 </p>

data/app/views/searls/auth/login_link_mailer/login_link.text.erb

@@ -4,7 +4,7 @@ Hi, <%= user_name %>!
 Hello!
 <% end %>
 
-<% if Searls::Auth.config.auth_methods.include?(:email_link) %>
+<% if @config.auth_methods.include?(:email_link) %>
 You can log in by visiting this URL for your <%= searls_auth_helper.rpad(@config.app_name) %>account:
 
 <%= searls_auth.verify_token_url({
@@ -14,12 +14,11 @@ You can log in by visiting this URL for your <%= searls_auth_helper.rpad(@config
 }.compact_blank) %>
 <% end %>
 
-<% if Searls::Auth.config.auth_methods.include?(:email_otp) && @short_code.present? %>
+<% if @config.auth_methods.include?(:email_otp) && @email_otp.present? %>
 
 You can log in by entering this code:
 
-<%= @short_code %>
+<%= @email_otp %>
 <% end %>
 
-Didn't try to log in? You can safely ignore this email.<%= " If this keeps
-happening, please let us know at #{@config.support_email_address}" if @config.support_email_address.present? %>
+Didn't try to log in? You can safely ignore this email.

data/app/views/searls/auth/logins/show.html.erb

@@ -3,12 +3,20 @@
 <%= form_with url: searls_auth.login_path, method: :post, data: {controller: searls_auth_helper.login_stimulus_controller} do |f| %>
   <%= f.hidden_field :redirect_path, value: params[:redirect_path] %>
   <%= f.hidden_field :redirect_subdomain, value: params[:redirect_subdomain] %>
-  <%= f.label :email %>
-  <%= f.email_field :email, required: true, value: params[:email], data: searls_auth_helper.email_field_stimulus_data %>
-  <%= f.submit "Log in" %>
+  <%= render "searls/auth/shared/login_fields", f: f %>
+  <div>
+    <%= f.submit "Log in" %>
+    <% if Searls::Auth.config.auth_methods.include?(:password) && (Searls::Auth.config.auth_methods & [:email_link, :email_otp]).any? %>
+      <%= button_tag "Send login email", name: "send_login_email", value: "1", type: "submit" %>
+    <% end %>
+  </div>
+  <% if searls_auth_helper.password_reset_available? %>
+    <div>
+      <%= link_to "Forgot your password?", searls_auth_helper.password_reset_request_path %>
+    </div>
+  <% end %>
 <% end %>
 
 <p>
   Not registered yet? <%= link_to "Sign up", searls_auth_helper.register_path %> instead!
 </p>
-

data/app/views/searls/auth/password_reset_mailer/password_reset.html.erb

@@ -0,0 +1,23 @@
+<%= content_for :width, 480 %>
+<p>
+  <% if (user_name = searls_auth_helper.attr_for(@user, @config.user_name_method)).present? %>
+    Hello, <strong><%= user_name %></strong>!
+  <% else %>
+    Hello!
+  <% end %>
+</p>
+<p style="margin-top: 1rem;">
+  You can reset your password by clicking this button:
+  <div style="margin-top: 2rem; text-align: center;">
+    <%= link_to password_reset_edit_url({
+      token: @token,
+      redirect_path: @redirect_path,
+      redirect_subdomain: @redirect_subdomain
+    }.compact_blank) do %>
+      <span style="width: 70%; box-shadow: 0 10px 15px -3px rgba(0, 0, 0, 0.1), 0 4px 6px -2px rgba(0, 0, 0, 0.05); display: inline-block; padding-left: 2rem; padding-right: 2rem; padding-top: 1rem; padding-bottom: 1rem; font-size: 1.5rem; font-weight: 700; border-radius: 0.75rem; background-color: <%= @config.email_button_color %>; color: white;">Reset password</span>
+    <% end %>
+  </div>
+</p>
+<p style="margin-top: 2rem; font-size: 0.875rem; color: #6b7280;">
+  If you didn't ask to reset your password, you can ignore this email.
+</p>

data/app/views/searls/auth/password_reset_mailer/password_reset.text.erb

@@ -0,0 +1,6 @@
+Hello<% if (user_name = searls_auth_helper.attr_for(@user, @config.user_name_method)).present? %>, <%= user_name %><% end %>!
+
+Reset your password using this link:
+<%= password_reset_edit_url({ token: @token, redirect_path: @redirect_path, redirect_subdomain: @redirect_subdomain }.compact_blank) %>
+
+If you didn't ask for this, you can ignore this email.

data/app/views/searls/auth/registrations/pending_email_verification.html.erb

@@ -0,0 +1,12 @@
+<h1>Check your email!</h1>
+<p>
+  We sent a verification link to <strong><%= h(session[:searls_auth_pending_email]) || h(params[:email]) %></strong>.
+  Click the link to verify your email before you can log in with a password.
+  If it doesn’t arrive in a minute, check spam or resend it below.
+</p>
+
+<p style="margin-top: 1rem;">
+  <%= link_to "Resend verification email",
+    searls_auth.resend_email_verification_path(**forwardable_params),
+    data: { turbo_method: :patch } %>
+</p>

data/app/views/searls/auth/registrations/show.html.erb

@@ -3,8 +3,7 @@
 <%= form_with url: searls_auth.register_path, data: {controller: searls_auth_helper.login_stimulus_controller} do |f| %>
   <%= f.hidden_field :redirect_path, value: params[:redirect_path] %>
   <%= f.hidden_field :redirect_subdomain, value: params[:redirect_subdomain] %>
-  <%= f.label :email %>
-  <%= f.email_field :email, value: params[:email], required: true, data: searls_auth_helper.email_field_stimulus_data %>
+  <%= render "searls/auth/shared/register_fields", f: f %>
   <%= f.submit "Register" %>
 <% end %>
 

data/app/views/searls/auth/requests_password_resets/show.html.erb

@@ -0,0 +1,17 @@
+<h1>Forgot your password?</h1>
+
+<%= form_with url: searls_auth.password_reset_request_path, method: :post, data: {controller: searls_auth_helper.login_stimulus_controller} do |f| %>
+  <%= f.hidden_field :redirect_path, value: params[:redirect_path] %>
+  <%= f.hidden_field :redirect_subdomain, value: params[:redirect_subdomain] %>
+  <div>
+    <%= f.label :email, "Email address" %>
+    <%= f.email_field :email, required: true, value: params[:email], autocomplete: "email" %>
+  </div>
+  <div>
+    <%= f.submit "Send reset instructions" %>
+  </div>
+<% end %>
+
+<p>
+  Remembered your password? <%= link_to "Log in", searls_auth_helper.login_path %> instead.
+</p>