Title: Usability issues with Dialog UI login: missing password recovery flow and blocked email recovery access

[Cotton-seed]

What feature do you want to see added?

Title: Usability issues with Dialog UI login: missing password recovery flow and blocked email recovery access

Description:

While testing the Dialog UI authentication system in AuthMeReloaded, I noticed two related usability issues affecting password recovery and user experience.

The configuration includes:

Show a graphical dialog UI for post-join login/register instead of chat messages.

useDialogUi: false

Show the login/register dialog during the Paper/Folia pre-join phase.

usePreJoinDialogUi: false
Issue 1: Missing password recovery flow in Dialog UI

When useDialogUi is enabled, authentication is handled entirely through a GUI.

However, if a player has previously registered an email but forgets their password, there is no built-in recovery option inside the dialog interface.

Suggestion:
Add an optional email field in the registration UI (enabled by default but optional for players)
Add a “Forgot Password” button or option in the login UI
Integrate recovery directly with the existing email system
Issue 2: UI close blocks access to recovery commands

If a player directly closes the login/register dialog UI, they are immediately kicked from the server.

This makes it impossible for them to execute recovery commands such as:

/email recovery test@test.com
Expected behavior:

Players should still have a way to access password recovery functionality even if they close the UI or fail login.

Actual behavior:

Closing the UI results in immediate disconnection, preventing any use of recovery commands.

Impact:
Players who forget their password cannot easily recover access
Recovery depends entirely on external admin intervention
Dialog UI becomes a “hard lock” entry point without fallback options

Are there any alternatives?

Suggestion (overall):

Improve the authentication flow by:

Adding built-in recovery entry points in the UI
Allowing recovery actions before full authentication is completed
Providing a fallback mechanism if the UI is closed

I am a user from China and not very fluent in English, so I used GPT to help me write this suggestion.

Anything else?

No response

[Xephi]

In preJoin Dialog, kick is configurable
In postJoin Dialog, they're kicked because of a timeout, you can increase it in the configuration.
Users should be able to /email recover from here.
I'll take a look at what we can implement for email recovery UI

[lokspel]

Then we need /2fa if you will do /email but it is too complex at this point

[Cotton-seed]

I would like to suggest an improvement to the Dialog UI authentication system to enhance usability and provide a complete but still lightweight password recovery flow without significantly increasing system complexity.

A “Forgot Password” option could be added to the login dialog. When selected, it would open a simple recovery flow where the player is first asked to enter their previously bound email address. The system then verifies whether the email exists and belongs to a registered account. If valid, a password reset code is sent to that email.

To keep the implementation simple and UI-lightweight, the recovery process can remain linear. After requesting a reset, the system should mark the email as having an active issued code (to prevent repeated requests within a cooldown period), ensuring that players cannot spam or repeatedly generate new codes, but can still proceed using the already issued one.

The next step would allow the player to enter the received reset code in a single input field (e.g. “I have received the reset code”). After successful verification, the dialog transitions to a final step where the player can set a new password.

This approach keeps the system minimal while still providing a complete recovery flow. It avoids introducing more complex systems such as full 2FA integration, while ensuring that users who forget their password can still regain access in a clear and intuitive way directly from the UI.

[Cotton-seed]

Please watch the following video. This shows what it looks like when using the UI in practice.
'''
registration:
enabled: true
messageInterval: 5
force: true
type: PASSWORD
secondArg: CONFIRMATION
forceKickAfterRegister: false
forceLoginAfterRegister: false
useDialogUi: true
usePreJoinDialogUi: true
preJoinDialog:
registerCancelKicks: false
'''
The Video[http://zimian.site:88/video/2026-05-05%2021-27-13.remuxed.mp4]

[Xephi]

Can you take a look at the new implem ?

[Cotton-seed]

Feedback on latest build (2716)

I am currently using the latest build:
https://ci.codemc.io/job/AuthMe/job/AuthMeReloaded/2716/

Configuration used

usePreJoinDialogUi: true
preJoinDialog:
  showCancelButton: true
  allowCloseWithEscape: false
  registerCancelKicks: false
  loginCancelKicks: true

dialog:
  showForgotPasswordButton: true
  showBody: true

Issue observed

The "Forgot Password" option is still not visible in the login dialog.

In the login UI, only the following buttons are shown:

Login
Cancel

The "Forgot Password" button does not appear, even though showForgotPasswordButton is enabled.
In my expectation, the login UI should look similar to the following image:

[Xephi]

Oh, forgot to add this on the preJoin dialog, should be implemented in latest builds. Sorry !
It replace the "Cancel" button completely, instead of adding one somewhere.