Skip to content

Work / Babul / Wiki / Surfaces

auth

Surfacedraftverified 2026-10-23

SURFACE.WEB.AUTH

Summary

The screens around sign-in and sign-up: verify email, forgot and reset password, and accepting an invite.

Raw wireframes

  • .context/designs/web/auth/<verify-email|forgot-password|reset-password|invite>.html
  • .context/designs/web/auth/reset-password-error.html — a link that has expired or was used

Why it is drawn this way

  • They reuse Sign in's layout: the form on the left, the tagline and the git picture on the right, so the way in looks like one place.
  • Verify email sits between Sign up and Company (T062): the link works for 24 hours, and can be sent again.
  • Forgot password sends a link that works for an hour; Reset signs every other device out. A link that no longer works says so and offers a new one.
  • A password is at least 12 characters, on Sign up and on Reset (owner, 2026-10-23).
  • An invite names who sent it, the access level, and the products it opens; it works for 7 days. Values follow example-northwind.