User story

If I want to reset my password, I'm first asked to enter my email address. If there is a match, I receive a reset token by email.

However, if I accidentally include a space before or after my email address, the string does not match, I do not get a reset token, and cannot reset my password.

Currently neither the view nor the template validates the email address:

https://github.com/BirkbeckCTP/janeway/blob/2fb70af7d19516df3136cafeb0f99516a566cb8b/src/core/views.py#L229-L234

https://github.com/BirkbeckCTP/janeway/blob/2fb70af7d19516df3136cafeb0f99516a566cb8b/src/themes/OLH/templates/core/accounts/get_reset_token.html#L27

https://github.com/BirkbeckCTP/janeway/blob/2fb70af7d19516df3136cafeb0f99516a566cb8b/src/themes/material/templates/core/accounts/get_reset_token.html#L16

https://github.com/BirkbeckCTP/janeway/blob/2fb70af7d19516df3136cafeb0f99516a566cb8b/src/themes/clean/templates/core/accounts/get_reset_token.html#L17

Proposed solution

Validate the email address in the HTML using the "email" type:

https://developer.mozilla.org/en-US/docs/Web/HTML/Element/input/email

Other solutions

Create a Django form that also validates the email on the server.