feat(signup): show identity + 'Not you?' back-to-signup on the password step

Author: yahyafakhroji

app/modules/i18n/locales/en.po

@@ -144,7 +144,7 @@ msgstr "Change your password"
 
 #: app/routes/password/reset.tsx:98
 #: app/routes/signup/method.tsx:255
-#: app/routes/signup/password.tsx:170
+#: app/routes/signup/password.tsx:177
 msgid "Check your email"
 msgstr "Check your email"
 
@@ -177,7 +177,7 @@ msgid "Confirm new password"
 msgstr "Confirm new password"
 
 #: app/routes/password/change.tsx:113
-#: app/routes/signup/password.tsx:213
+#: app/routes/signup/password.tsx:227
 msgid "Confirm password"
 msgstr "Confirm password"
 
@@ -212,7 +212,7 @@ msgid "Create a new account"
 msgstr "Create a new account"
 
 #: app/routes/login/index.tsx:417
-#: app/routes/signup/password.tsx:217
+#: app/routes/signup/password.tsx:231
 msgid "Create account"
 msgstr "Create account"
 
@@ -381,6 +381,7 @@ msgid "Not registered?"
 msgstr "Not registered?"
 
 #: app/components/identity-badge/identity-badge.tsx:28
+#: app/routes/signup/password.tsx:197
 msgid "Not you?"
 msgstr "Not you?"
 
@@ -403,7 +404,7 @@ msgid "Passkey"
 msgstr "Passkey"
 
 #: app/routes/login/method.tsx:132
-#: app/routes/signup/password.tsx:209
+#: app/routes/signup/password.tsx:223
 #: app/routes/sso/ldap.tsx:77
 msgid "Password"
 msgstr "Password"
@@ -501,7 +502,7 @@ msgid "Session active"
 msgstr "Session active"
 
 #: app/routes/signup/method.tsx:334
-#: app/routes/signup/password.tsx:185
+#: app/routes/signup/password.tsx:192
 msgid "Set a password"
 msgstr "Set a password"
 
@@ -573,6 +574,10 @@ msgstr "Sign-in is currently unavailable for this account. Please contact your a
 msgid "Signing in as"
 msgstr "Signing in as"
 
+#: app/routes/signup/password.tsx:195
+msgid "Signing up as"
+msgstr "Signing up as"
+
 #: app/routes/setup/mfa.tsx:209
 msgid "Skip for now"
 msgstr "Skip for now"
@@ -767,7 +772,7 @@ msgstr "We've sent a password reset link to <0>{0}</0>"
 #. placeholder {0}: (actionData as { email: string }).email
 #. placeholder {0}: actionData.email
 #: app/routes/signup/method.tsx:257
-#: app/routes/signup/password.tsx:172
+#: app/routes/signup/password.tsx:179
 msgid "We've sent a verification link to <0>{0}</0>"
 msgstr "We've sent a verification link to <0>{0}</0>"
 
@@ -816,10 +821,6 @@ msgstr "You signed in as a different account than the one you were re-authentica
 msgid "You'll be asked to sign in before authorizing."
 msgstr "You'll be asked to sign in before authorizing."
 
-#: app/routes/signup/password.tsx:186
-msgid "You'll need to set a password to complete your signup."
-msgstr "You'll need to set a password to complete your signup."
-
 #: app/routes/signup/method.tsx:279
 msgid "You're almost done! <0>{loginName}</0>"
 msgstr "You're almost done! <0>{loginName}</0>"

app/routes/signup/password.tsx

@@ -10,6 +10,7 @@ import { MaxMindTracker, readMaxMindTrackingToken } from '@/modules/fraud/maxmin
 import { resolveOrg } from '@/resources/shared/resolve-org';
 import { registerWithPassword } from '@/resources/signup';
 import { signupPasswordSchemaFor } from '@/resources/signup/signup.schema';
+import { paths } from '@/routes/paths';
 import { providerForRequest } from '@/server/auth-context.server';
 import { loaderCsrf, assertCsrf } from '@/server/csrf';
 import { requireEmailVerification } from '@/server/env';
@@ -30,7 +31,7 @@ import {
   type LoaderFunctionArgs,
   type MetaFunction,
 } from 'react-router';
-import { Form as RRForm } from 'react-router';
+import { Form as RRForm, Link } from 'react-router';
 
 export const meta: MetaFunction = () => [{ title: 'Set a password' }];
 
@@ -164,6 +165,12 @@ export default function SignupPassword() {
   // replaces the per-route toast).
   const errorMessage = useAuthActionError(actionData);
 
+  // "Not you?" returns to the signup start (not /login — this is a signup ceremony) so a
+  // different email can be entered. Mirrors IdentityBadge's requestId/organization threading,
+  // loginName intentionally dropped. AuthCeremony's shared IdentityBadge is login-only copy
+  // ("Signing in as" → /login), so the identity + link are rendered inline here instead.
+  const notYouHref = paths.signup.index({ requestId, organization });
+
   if (actionData && 'sent' in actionData) {
     return (
       <AuthCard
@@ -183,7 +190,14 @@ export default function SignupPassword() {
       <MaxMindTracker accountId={maxmindAccountId} />
       <AuthCeremony
         title={<Trans>Set a password</Trans>}
-        description={<Trans>You'll need to set a password to complete your signup.</Trans>}
+        description={
+          <>
+            <Trans>Signing up as</Trans> <strong>{loginName}</strong>.{' '}
+            <Link to={notYouHref} className="underline">
+              <Trans>Not you?</Trans>
+            </Link>
+          </>
+        }
         error={errorMessage}>
         <Form.Root
           schema={schema}

cypress/component/routes/signup/password-render.cy.tsx

@@ -50,4 +50,12 @@ describe('signup/password — render adoption', () => {
       '/signup'
     );
   });
+
+  it('shows the identity being registered with a "Not you?" link back to /signup', () => {
+    mountPassword();
+    cy.contains(LOADER_DATA.loginName, { timeout: 6000 }).should('exist');
+    cy.findByRole('link', { name: /not you/i })
+      .should('have.attr', 'href')
+      .and('match', /^\/signup(\?|$)/);
+  });
 });