Marked as helpful by the asker
Three parts:
- A page with an email field that calls
supabase.auth.resetPasswordForEmail(email, { redirectTo: 'https://yourapp/reset' }). - Add
https://yourapp/resetto Redirect URLs in Supabase Auth settings. - A
/resetpage that, once the user lands there with a session, shows a new-password field and callssupabase.auth.updateUser({ password }).
Give Lovable those three bullet points literally. "Add forgot password" is too vague for it; the three calls are not.