From 575932b32fc4579fafcc2282e97bfc4b748e358c Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 1 Jan 2026 23:40:21 -0300
Subject: [PATCH] portal: link Keycloak reset-credentials

---
 backend/atlas_portal/routes/auth_config.py | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/backend/atlas_portal/routes/auth_config.py b/backend/atlas_portal/routes/auth_config.py
index 46c9562..0e68cad 100644
--- a/backend/atlas_portal/routes/auth_config.py
+++ b/backend/atlas_portal/routes/auth_config.py
@@ -24,6 +24,11 @@ def register(app) -> None:
             f"&response_type=code"
             f"&scope=openid"
         )
+        reset_url = (
+            f"{issuer}/login-actions/reset-credentials"
+            f"?client_id={quote(settings.KEYCLOAK_CLIENT_ID, safe='')}"
+            f"&redirect_uri={redirect_uri}"
+        )
 
         return jsonify(
             {
@@ -32,7 +37,6 @@ def register(app) -> None:
                 "realm": settings.KEYCLOAK_REALM,
                 "client_id": settings.KEYCLOAK_CLIENT_ID,
                 "login_url": login_url,
-                "reset_url": login_url,
+                "reset_url": reset_url,
             }
         )
-