Example 2: Resetting a Personal Password

Scenarios

If a third-party application user forgets the login password, the user can reset the password after verification.

Service Process

Figure 1 Process of resetting a personal password

1. A third-party application initializes parameters such as user identity parameters, and sends a request carrying these parameters to API Gateway to obtain a puzzle piece CAPTCHA.
2. API Gateway sends a request to Huawei Cloud Meeting Management Platform to obtain a puzzle piece CAPTCHA.
3. Huawei Cloud Meeting Management Platform returns the slider CAPTCHA to API Gateway.
4. API Gateway returns the puzzle piece CAPTCHA to the third-party application.
5. The third-party application fits the puzzle piece on the frontend GUI, and sets parameters such as the token and X coordinate of the puzzle piece.
6. The third-party application sends a request carrying parameters specified in step 5 to API Gateway to verify the puzzle piece CAPTCHA.
7. API Gateway sends a request to Huawei Cloud Meeting Management Platform to verify the puzzle piece CAPTCHA.
8. Huawei Cloud Meeting Management Platform returns the token information to API Gateway.
9. API Gateway returns the token information to the third-party application.
10. After the verification, the third-party application specifies parameters such as the token and user identity information, and sends a request containing the parameters to API Gateway to obtain a verification code.
11. API Gateway sends a request to Huawei Cloud Meeting Management Platform to obtain a verification code.
12. Huawei Cloud Meeting Management Platform sends a verification code and returns the verification details to API Gateway
13. API Gateway returns the verification details to the third-party application.
14. After receiving the verification code, the third-party application specifies the user identity information and verification code parameters, and sends a request carrying the parameters to API Gateway to verify the verification code.
15. API Gateway sends a request to Huawei Cloud Meeting Management Platform to verify the verification code.
16. Huawei Cloud Meeting Management Platform verifies the verification code and returns the token information to API Gateway.
17. API Gateway returns the token information to the third-party application.
18. The third-party application specifies passwords such as the user identity information and new password, and sends a request carrying the parameters to API Gateway to reset the password.
19. API Gateway sends a password reset request to Huawei Cloud Meeting Management Platform.
20. Huawei Cloud Meeting Management Platform resets the user password.