é""r

backend/api/auth.py

@@ -240,6 +240,21 @@ def handle_reset_password_options():
     """Handle OPTIONS requests for preflight CORS checks for reset password route."""
     return '', 200
 
+@auth_bp.route('/reset-password', methods=['GET'])
+def show_reset_password_form():
+    """
+    Serve the password reset form.
+    This endpoint is accessed via the link sent in the password reset email.
+    The token will be available as a query parameter (e.g., ?token=abc123).
+    The SPA frontend should read this token and display the form accordingly.
+    """
+    # Log the access for monitoring
+    current_app.logger.info("Password reset form page accessed.")
+    # For an SPA, serving index.html allows the frontend router to take over.
+    # The frontend can access query parameters like 'token' using its router or window.location.
+    # No specific action is needed here other than ensuring the route is recognized.
+    # The main app.py serve_frontend will ultimately serve the SPA's index.html.
+    return '', 200 # Let the main SPA handler take over
 
 @auth_bp.route('/reset-password', methods=['POST'])
 def reset_password():