CSH Self Service Account Management

Account Recovery
- Based on information stored about the user, allow them to reset a potentially forgotten password.
- Administrators can also manually generate these reset tokens, allowing for manual identity verification.
Two Factor Management
- Allow users to generate and verify a two factor secret which will then be created in both Keycloak and FreeIPA.
- Also provides the ability to disable two-factor, removing the secret from both locations.
Password Changing
- Provide a central web interface for changing known passwords.

SMS Number
- Uses Twilio to send temporary verification pin. Once verified the user is redirected to the reset page.
External Email
- Emails a direct link to the reset page.

Development Environment

Bring up dependencies:
1. ```
docker-compose up -d
```
Copy configuration template and set necessary secrets:
1. ```
cp ./config.env.py ./config.py
```
Run migrations:
1. ```
flask db migrate
```
Run the application:
1. ```
FLASK_ENV=development python ./wsgi.py
```