Work / Babul / Wiki / Surfaces
auth
Surfacedraftverified 2026-10-23
SURFACE.WEB.AUTHSummary
The screens around sign-in and sign-up: verify email, forgot and reset password, and accepting an invite.
Raw wireframes
- .context/designs/web/auth/<verify-email|forgot-password|reset-password|invite>.html
- .context/designs/web/auth/reset-password-error.html — a link that has expired or was used
Why it is drawn this way
- They reuse Sign in's layout: the form on the left, the tagline and the git picture on the right, so the way in looks like one place.
- Verify email sits between Sign up and Company (T062): the link works for 24 hours, and can be sent again.
- Forgot password sends a link that works for an hour; Reset signs every other device out. A link that no longer works says so and offers a new one.
- A password is at least 12 characters, on Sign up and on Reset (owner, 2026-10-23).
- An invite names who sent it, the access level, and the products it opens; it works for 7 days. Values follow example-northwind.