ayanova/devdocs/todo.txt

@@ -2,8 +2,7 @@
 @@@@@@@@@@@@@@@ ROADMAP STAGE 6 - "REALITY" All in on porting over all the real objects from v7 
 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 
-
-todo: UPDATE ALL AYANOVA.COM .net apps to use runtime 5.0 if possible
+SIDE TODO: UPDATE ALL AYANOVA.COM .net apps to use runtime 5.0 if possible
 	right now it has
 	qboauth using runtime netcoreapp2.2
 	contact using runtime netcoreapp3.1
@@ -34,8 +33,21 @@ To REMOVE: apt-get remove dotnet-runtime-3.0 (replace 3.0 with whatever version
 
 
 
+User / Contact self password administration and onboarding
+		Still support current method of admin setting login and password as an option
+		Keep the random generator for password only and expose it in the UI as a button beside the password field (magic wand?)
+		Need to be able to have a "RESET" route as per this:
+			https://www.troyhunt.com/everything-you-ever-wanted-to-know/
+			However, it is also part of the onboarding process so the wording needs to be done carefully as this is also how staff trigger a new user account 
+			For security reasons, Contact can't initiate the reset, it must be done by internal staff (though it doesn't need to be super high rights, limited should be ok, it's a caretaking issue really)
+			Reset sends via user email a time limited reset code as part of an url to go to the reset form in the AyaNova UI where they can enter new password which are sent along with the reset code to a User route
+				if the reset code is valid and brings up a user then checks if expired, if not then accepts the new login and password and redirects them to the login page
+		Login name is fixed and set by internal staff only
+		Password only can be changed by the user
+
+
 todo: SEEDER
-	Seed sample customers from v7 specifically in addition to random ones?
+	Sample customer contacts need random contact info also entered so it's visible as example
 
 todo: bugbug datetime control clear buttons don't trigger emit of empty date times
 	contractexpires on customer form clearing it and saving sends date to server as if it wasn't cleared at all
@@ -70,26 +82,16 @@ todo: TESTING After customer form is made
 
 
 OUTSTANDING WITH CUSTOMER	
-
-
-	PW / Login generator automatically and sends creds
-		need code that generates easily enterable urls
-		if pw starts with "TEMP" or some key token then maybe they need to go to the change password automatically upon login
-			this way can issue a pw and email it and when user first logs in they must set it to something?		
-		Add button to email the user their creds and login and invite them to change the password once they login
-		 prepend-icon="$ayiMagic"
-	Customer User (contacts) UI for this client (generate, view)
-		case for this and notes, sb very simple way to create and send creds for user
-	Customer User / User(s)
-		Label as Contact / Contacts
-		Show customer / head office NAME in generic contacts grid view
-	Copy address to clipboard?
+		Copy Customer address to clipboard?
 		Yes and copy all contact info as well?
 	Show all 
 		workorders
 		quotes
 		pm's
 
+	
+
+
 
 NEXT UP: Customer