User Profile

In a previous step, you added the ability for experience visitors to register for an account. Now, you'll build on the changes you made there and allow your experience users to manage their profiles.

Step One: Create the Endpoints

You'll add four endpoints: two for profile management and two for password changing.

GET /edit-profile

This endpoint is responsible for handling requests to view the "Edit Profile" page. From the "New Endpoint" page:

1. Leave the Method set as GET.
2. Set the Route to /edit-profile.
3. Change the Access Control to Any authenticated user.
4. Set the Unauthorized Reply Type to Redirect, with a Status Code of 302 and a Path of /login.
5. Save the route.
6. Return to the endpoints list page.
7. Click "Add Endpoint" to add the next route.

POST /edit-profile

This endpoint is responsible for handling form submissions from the "Edit Profile" page.

1. Set the Method to POST.
2. Set the Route to /edit-profile.
3. Change the Access Control to Any authenticated user.
4. Set the Unauthorized Reply Type to Redirect, with a Status Code of 302 and a Path of /login.
5. Save this route and back out to the endpoints list to make another one.

GET /change-password

This endpoint is responsible for handling requests to view the "Change Password" page.

1. Leave the Method set as GET.
2. Set the Route to /change-password.
3. Change the Access Control to Any authenticated user.
4. Set the Unauthorized Reply Type to Redirect, with a Status Code of 302 and a Path of /login.

POST /change-password

This endpoint is responsible for handling form submissions from the "Change Password" page.

1. Set the Method to POST.
2. Set the Route to /change-password.
3. Change the Access Control to Any authenticated user.
4. Set the Unauthorized Reply Type to Redirect, with a Status Code of 302 and a Path of /login.

Step Two: Create the Views

Now that all the endpoints have been created, move on to creating new views. You'll create two new pages, make one new component, and edit a component created in a previous step. Click "Edit" in the left column to return to your Experience Views list.

Page: Edit Profile

First, you'll create a new page to render when the /edit-profile endpoint is requested. From here, users can change their name and email address.

1. Click "Views" in the left column to return to your Experience Views list.
2. Click the "Add" button in the "Pages" list.
3. Name the page Edit Profile.
4. Add a description; the field is optional and does not affect the page as it is presented to your experience users.
5. Select your previously created layout for the page's Layout.
6. Click "Create Page". This will redirect you to a screen where you can edit the new page's content.
7. Copy this snippet and paste it for the page's Content.
8. Once the page is ready, click "Create Page" to save your work.

Page: Change Password

Now, you'll add a page where users can change their password. They will have to enter their current password to set a new one.

1. Click "Views" in the left column to return to the "Views" list
2. Click "Add" in the "Pages" list.
3. Name this new page Change Password.
4. Select the same Layout as for your other pages.
5. Click "Create Page". This will redirect you to a screen where you can edit the new page's content.
6. Copy this code to serve as the page's Content.

Component: successAlert

You're referencing a new component in each of your newly created pages. This component is a simple confirmation box for telling the user that his/her profile changes were successful.

1. Return to the "Views" page.
2. Click the "Add" button in the "Components" list.
3. Name the component successAlert.
4. Use this snippet for the component's Content.

This component is almost identical to our errorAlert component, except it will display in green instead of red.

Component: profileForm

Finally, you'll tweak the profileForm component you created for user registration so you can reuse the component in your "Edit Profile" page.

1. Navigate to the profileForm component from your list of components.
2. Replace its Content with this snippet.

You're making one significant change to the component, which can be seen just above the closing </form> tag: If the component is being called from the /edit-profile route, you are excluding the password input from the form and changing the text of the submit button. You do this by checking if there is a current user with the {{#if experience.user}} block helper and conditionally rendering one bit of content or the other based on the route.

Step Three: Create the Workflows

Continue with the model you've followed so far by including the GET and POST methods for each route within the same workflow.

Edit Profile Workflow

1. Download the workflow template.
2. Import the file endpoint-edit-profile.flow as a new experience workflow.
3. Update each of the endpoint triggers to point to the POST /edit-profile and GET /edit-profile endpoints you created above.
4. Update the endpoint reply nodes to point to your Edit Profile page.
5. Enable the workflow (since imported workflows are by default disabled).

As a general overview, this workflow handles the following:

• If a user visits /edit-profile, you respond to the request with your new Edit Profile page.
• When that user submits the Edit Profile form, you validate that they have submitted all fields correctly. Then, you attempt to make the update. It could fail if, for example, the user attempts to change their email address to one that is already registered to another experience user. If either of these operations fail, you re-render the Edit Profile page with an error message.
• If the user update is successful, you redirect the user to the same URL with a success=true query parameter. The presence of this on the URL tells you if you should show your successAlert component.

There is a comment on each workflow node describing its function in more detail.

Change Password Workflow

Now create a workflow allowing your logged-in users to update their passwords.

1. Download the workflow template, then import the file endpoint-change-password.flow as a new experience workflow.
2. Update each of the endpoint triggers to point to the POST /change-password and GET /change-password endpoints you created above.
3. Update the endpoint reply nodes to point to your Change Password page.
4. Enable the workflow (since imported workflows are disabled by default).

As a general overview, this workflow handles the following:

• If a user visits /change-password, you respond to the request with your new Change Password page.
• When that user submits the Change Password form, you validate that they have submitted valid old and new passwords. Then, you try authenticating using the old password provided by the user. If any of those checks fail, you re-render the Change Password page with an error message.
• If authentication succeeds, you change the user's password and display a confirmation message.

There is a comment on each workflow node describing its function in more detail.

Step Four: Link to the Feature

Finally, give your experience users a way to reach the features you just completed.

Component Edits: userIndicator

Currently, your userIndicator component displays a single-item dropdown menu in your layout's top right corner when the user is logged in. Add links to our two new features into that menu.

Navigate to the userIndicator component from the "Components" list. In the Content, immediately above this line:

<li><a href="/logout">Log Out</a></li>

Add the following two links:

<li><a href="/edit-profile">Edit Profile</a></li>
<li><a href="/change-password">Change Password</a></li>

Alternatively, you can copy this content and overwrite the entire userIndicator component.

Now, a signed-in user can access the /edit-profile and /change-password links from their contextual menu.

What's Next

This concludes this tutorial, in which you've added the ability for experience visitors to register for an account and start accessing parts of the experience that were previously open only to logged-in visitors.

Next, you'll build on top of what you've done here to add a reset password flow.