openBuild
  • Introduction
    • Introduction
    • The Framework
    • The Library
    • Release Notes
  • Core Concepts
    • Bubble vs openBuild
    • Responsive Design
      • Repeating groups
      • Advanced Responsiveness
    • Styles
      • Typography
      • Colors
      • Groups & Box Shadow
      • Inputs
      • Buttons
      • Style Variations
      • Changing styles
      • Custom CSS
    • Pages
      • index
      • base-menu
      • base-top
      • base-ribbon
      • base-mobile
      • admin
      • verify
      • styleguide
      • terms
      • login
      • reset_pw
      • privacy
      • 404
      • Menu
      • Base Layouts
  • WORKING WITH the framework
    • Getting Started
    • Navigation
      • Go to page
      • Navigation through custom states
      • Navigation through URL parameters
      • Navigation through URL parameters with Option sets
    • Data & Workflows
      • Custom States
      • Custom Events
      • Working with Reusables
      • CRUD
      • Source Popup
      • Backend Workflows
    • Users and Roles
    • Signup, Login, Password reset
    • Security & Privacy
      • Authenticating endpoints
    • Transactional Email
      • Setup Sendgrid
      • Setup Postmark
    • Alerts and Confirmations
    • Customization
    • Best Practices
      • Syntax
      • Color Coding
  • openBuild Library
    • Chrome Extension
  • Framework Elements
    • Menus
    • Option sets
    • Plugins
    • API Connector
    • User Access Management
    • CRUD Floating Group
    • CRUD Popup
    • Data Table
    • Security Redirect
    • Mail management
    • User Settings
    • Header & Footer
Powered by GitBook
On this page
  • Signup
  • Login
  • Forgot password
  • Password strength checker
  • Login with magic link
  • Invalid password token
  • Email validation workflows
  • User Access Management in a popup
  1. WORKING WITH the framework

Signup, Login, Password reset

The keys to your castle

PreviousUsers and RolesNextSecurity & Privacy

Last updated 2 years ago

The openBuild framework comes with a reusable that handles Sign up, Log in, Reset passwords and much more.

The resauble is used on the login page and reset_pw page in the framework.

Signup

Sign up with email workflows and UI for social logins.

Workflows connected to Signup section are in the 'Signup' folder.

By default, the new user has to accept the Terms and Conditions and Privacy policy to be able to signup. That's why we use the conditionals logic on the button and pre-built workflows for changing the state.

Login

Two main events connected to the login section are:

a) 'Log the user in' action - that gets triggered directly on the button click. It is placed there to enable the user to submit the login when hitting 'enter',

b) 'LOG IN' custom event - by default, only the redirect action is placed in this custom event, but this is the Workflow where additional actions should be placed. The same custom event is used for 3rd party signup/login.

Forgot password

In the reusable, there is a dedicated section with workflows connected to password reset.

When a user inputs their email we send it to a custom event called '📧 SEND RESET PASSWORD EMAIL'

In the custom event there are 3 actions:

a) Send password reset email - native Bubble action to generate reset password token

b) Send Email - Reset Password Link - a standard email with information about how to reset your password and dedicated link

Section visible after successful submission of the 'Forgot password?' form.

After clicking the link in the email user will be redirected to the Reset password section.

Password strength checker

In the framework, you will find two versions of the password strength checker i.e progress bar or displaying password details. Both of them work independently so you can choose one that matches your app, or you can keep using both.

Login with magic link

Same as with the Reset Password workflows, there is a dedicated Custom event to handle the actions connected to sending the user magic link via email.

Invalid password token

Currently, the reset password activation token is only active for 24 hours from the creation date. This time window is definitely restrictive so we handle invalid tokens via a better User Experience.

In openBuild we take advantage of the error-handling feature that allows us to trigger an action whenever the User tries to use an expired token.

By default whenever a user requests a reset password token via the User Access Management reusable we create a link that contains his email in the URL. If you did send your user a reset password email without the email parameter, the pre-built workflow logic will also handle that user.

Email validation workflows

openBuild template comes with pre-build validation workflows. To enable them set the verifyEmail attribute in 🔒 System option set to 'yes'.

If you enabled the email verification workflows, after the Signup we trigger CONFIRM-EMAIL custom event.

In the verify page you find two sections.

Remember to correctly connect redirect workflows to your app pages.

User Access Management in a popup

Signup workflow triggers a SIGN-UP custom event, that depending on your app settings will trigger a confirmation email sequence or not. Read about it in .

c) Send Email - Activation Link - from the you are able to send user invites to the new users. The email content of that invite is different than a standard Reset Password email.

Additionally in the you find a disabled workflow that needs enabling if you want to block access to the app for every user who does not have his/her email verified.

admin panel
🔐 SECURITY REDIRECT
this section
Signup section
Only when the T&C is accepted, the workflow runs
Login section
Actions run when btn.login is clicked
'LOG IN' Custom event
Forgot password section
📧 SEND RESET PASSWORD EMAIL
Check your email section
Reset password section
Want a password strength bar or checkbox details?
Login with magic link section
Creating the magic link
Sending the link via email
Catching the Invalid token error
If the is not email parameter this section will be visible
If the is an email in the URL parameter it will automatically send the a new reset password / activation email
Sending confirmation email
Redirecting to verify page