I have already configured my application to allow users to reset their password by receiving a reset link via email when they enter their registered email address.
However, imagine a scenario where a user not only forgets their password but also the email they used to register. This can happen with users who have multiple email accounts. In such cases, since my users are also required to provide their first name, last name, and phone number during registration, I would like to offer the option to receive the password reset link at their registered email address by entering their registered phone number or their full name instead of the email.
Is this possible? Is there any way to configure this? Thank you.
Hi Dana. The simplest way is to Do a Search for user while disabling the privacy rule of the email field (if you have it).
This is not recommended, especially if you have your data API exposed on the User table. But if that’s not the case and you’re doing an internal app, you can simply Do a search for User using the phone or username parameter, first item, and then use that email text on the Log in action.
Thank you very much, Viktor.
I figured that if Bubble didn’t provide for recovery via username or phone, it was likely to avoid compromising the application’s security within its standard configuration. In this case, I’ll forget about recovering the password using information other than email. Instead, I will set up a contact form for users to reach the site administrator directly, for those cases where a user absolutely cannot regain access to their account.
For recovery, we can try to set the input for the username/phone, and then regardless of their input, show that standard message of “if we have this on record, you’ll receive an email with the link”.
Then, you trigger that same idea as a backend workflow, checking the “Ignore privacy rules”. Then you can have the privacy rule protecting the email.
