SSPR vs Account
I recently realized I did a confusing thing. I have two similar but different services that are separateclose instancesenough in function for the distinction to be confusing. This service is based on an open-source tool, and because of the functions I want to make available to Matt-Cloud users, I need to build two different versions of the same apptool. thatTo doput similarthis butanother differentway, things,I andam too lazy to write my own SSPR so I wantedneed to writeuse the tools that others have so graciously made available to me for free.
SSPR means Self-Service Password Reset. The point of this site is so Matt-Cloud users can handle forgotten password resets. The service allows users to set up somethinga ontwo-factor whycode Iand didto confirm an email address so that when they forget their Matt-Cloud password they can reset it likeusing this.a variety of methods.
The tl/drAccount site is thatfor itMatt-Cloud makes it easier on meusers to implementupdate theaccount functionsemail Iaddress wanted.or Thepassword longer explanation is what those functions are.
Since one iswhen already logged inin. withIt Authelia, I wanted there to be a password site that would work with the SSO. I also wanted to be able to allow y'all to deal with forgotten passwords on your own because I know I love me a good self-checkout as much as the next introvert. Problem is, the password reset feature couldn't be behind Authelia, because Authelia needs a login, see? So, I made two separate instances of the password manager app with very different configurations. The SSPR site needed to be accessible outside the SSO, and the Account site needed to only work with the SSO, which I will call the Eyeballs Venn-Diagram for functionality. The account site also has the join site in it, which doesn't make sense to have on a site that can't be reached without a login. Now, PWM does offer a lot of granularity, and if it wasn't foruses the SSO requirementto Istart couldusers getlogged awayin, withand will only re-authenticate when requesting a singlesecure instance,change.