KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

poc-beeper-password-reset

★ 15 Open GitHub ↗

Proof of Concept (PoC) script implementing email/code (JWT) password reset flow for Beeper / Matrix

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Beeper - Password Reset (JWT)

Proof of Concept (PoC) script implementing JWT / email-code based password reset flow for Beeper / Matrix.

## Warning

**WARNING:** Use this at your own risk, there might be bugs; if the flows aren't implemented correctly you may end up logging out all of your existing devices, and if you haven't backed up your encryption keys you may lose access to your encrypted messages. You use this tool at your own risk.

## For Beeper users who just want to get a password set by support (without needing to use this tool)

For Beeper users seeking a straightforward way to set a password without using this tool: Contact Beeper Support directly and request "a temporary password for use with an alternate client". Beeper Support should then assist you in establishing a temporary credential, which you can then update to a permanent, self-chosen password via the client's settings. This process allows you to set up a new password with ease and security.

## Usage

First you will need to run:

```shell
npm install
```

Then you can use the script as follows:

```shell
./beeper-password-reset.ts --help

./beeper-password-reset.ts --version

./beeper-password-reset.ts login-email --email user@example.com

./beeper-password-reset.ts login-token --token jwtToken123

./beeper-password-reset.ts reset-password --access_token accessToken123 --jwt_token jwtToken123 --new_password newPassword123
```

Output from `./beeper-password-reset.ts --help`:

```shell
⇒ ./beeper-password-reset.ts --help
beeper-password-reset.ts <command>

Commands:
  beeper-password-reset.ts login-email     Login with email
  beeper-password-reset.ts login-token     Login with JWT token
  beeper-password-reset.ts reset-password  Reset password

Options:
  --version  Show version number                                       [boolean]
  --help     Show help                                                 [boolean]
```

## Announcement Posts

- https://twitter.com/_devalias/status/1663515884575657993
- https://www.linkedin.com/posts/glenn-devalias-grant_opensource-beeper-matrix-activity-7069282362525675520-VlCb
- https://www.reddit.com/r/beeper/comments/13vol68/i_built_a_beeper_password_reset_tool_for_login/
- https://news.ycombinator.com/item?id=36123896

## Libs / Dependencies

- https://github.com/yargs/yargs
- https://github.com/terkelg/prompts
- https://github.com/node-fetch/node-fetch
- https://github.com/esbuild-kit/tsx

## Background Context

### Summarised Notes / Process (and ChatGPT Prompts)

The following are my notes (formatted as a ChatGPT prompt) on implementing a JWT-based password reset flow, using Beeper's new 'email login' flow.

```markdown
Write me a basic typescript CLI app that implements 3 seperate flows/commands. The code should be neat/DRY, easy to understand, and easily maintainable/extensible.

--

The first flow allows logging in with an email address and code sent to the email:

- ask the user for their email address (if not already read from CLI params)
- send a POST to https://api.beeper.com/user/login with an empty body and `Authorization: "Bearer BEEPER-PRIVATE-API-PLEASE-DONT-USE"` header
- extract the `request` param from that response and display it to the user
- send a POST to https://api.beeper.com/user/login/email with the extracted request + email in the body `{"request":"REDACTED","email":"REDACTED"}` + `Authorization: "Bearer BEEPER-PRIVATE-API-PLEASE-DONT-USE"` header
- ask the user for the code sent to their email address
- send a POST to https://api.beeper.com/user/login/response with the request + code from email: `{"request":"REDACTED","response":"REDACTED-code-from-email"}` + `Authorization: "Bearer BEEPER-PRIVATE-API-PLEASE-DONT-USE"` header
- extract the JWT `token` from the response and display it to the user

--

The second flow show allow the user to login with a JWT token:

- ask the user for their JWT token (if not already read from CLI params)
- send a POST request to https://matrix.beeper.com/_matrix/client/v3/login with the JWT token: { "type": "org.matrix.login.jwt", "token": "REDACTED" }
- extract the access_token, device_id and user_id from the response + display the entire response json pretty formatted

--

The third flow allows the user to reset their password using an access token and JWT:

- ask the user for their access token, JWT, and new password (if not already read from CLI params)
- send a POST to https://matrix.beeper.com/_matrix/client/v3/account/password with the access token in the Authorization Bearer REDACTED-ACCESS-TOKEN header, and no json body
- extract the `session` from the response, and ensure that the `flows` contains an entry with a `stages` array that contains `"org.matrix.login.jwt"`, if not, throw an error
- send a POST to https://matrix.beeper.com/_matrix/client/v3/account/password with the access token in the Authorization Bearer REDACTED-ACCESS-TOKEN header, and previously extracted `session` and `jwt` in the JSON body:
{
    "auth": {
        "type": "org.matrix.login.jwt",
        "token": "REDACTED.JWT.TOKEN",
        "session": "REDACTED-FROM-PREV-RESPONSE"
    },
    "new_password": "REDACTED-NEW-PASSWORD",
    "logout_devices": false
}
- If that response is a 200 success, tell the user their password was changed successfully

--

poc-beeper-password-reset

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README