Forget Password

[sainikhilsamineni]

@dosu help me add a forgot password view onto superset that sends a temporary password to the mail of the user by taking mail address or username from a form input that can be used by the user to log in

[dosubot[bot]]

Superset doesn't have a built-in "forgot password" feature, but there are community discussions and example implementations you can follow. The typical approach is to add a "Forgot Password?" link to the login page, which opens a React form where users enter their email or username. On the backend, you create an endpoint that generates a secure, time-limited token (or a temporary password), sends it to the user's email using Superset's SMTP utilities, and allows the user to reset their password or log in with the temporary credential.

Superset's email sending is handled via direct SMTP configuration in superset_config.py and the send_email_smtp utility in the backend—no Flask-Mail or similar library is used, so you'll need to use these existing utilities for sending reset emails. For security, use token expiration, password hashing, and proper validation.

You can see a detailed example of this flow, including frontend and backend code, in this recent discussion. There's also a related feature proposal and discussion here. Superset's authentication is managed by Flask-AppBuilder, so you can extend or customize the authentication views and security manager to add this functionality.

Make sure your SMTP settings are correct in your config, and follow security best practices for token generation and password handling.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}