I would like to start off by saying this is a very cool idea, and I can see the hard work and ingenuity that went into this effort. I think it is especially impressive if this is a solo endeavor. However, as someone who has quite a bit of experience with React, a tool like this I could see getting in my way. I don't see this being particularly helpful, maybe for prototyping for designers. It looks like a solution looking for a problem to me, honestly. Anyway, at least it is cool, and shows off your skill! Thanks for sharing.
Well, this is just a big turn-off. GitLab did this to me recently, apparently for security purposes. However, someone changing my password for me is a mega breach in my security. GitLab lost my business because of this "security feature" or whatever. GitHub if you do this, I will self-host my code, and stop using your service. Other companies who market to Software Engineers, and security folk, should take heed.
I do want to say there are legitimate reasons to have your users have a forced reset. For example, you’re upgrading your encryption, you migrated to a new IAM system, you’re handling of UTF8 could have been wrong or your meeting a new compliance standard that requires stricter passwords. I don’t know what happened with GitLab, but a telltale sign it’s bad is if they do it for you and not on your next login.
