Add admin account flow diagram page by maebeale · Pull Request #1442 · rubyforgood/awbw

maebeale · 2026-03-27T16:18:35Z

What is the goal of this PR and why is this important?

Gives admins a visual reference for triaging the most common user account issues (invite, password reset, lockout, email change)
Based on analysis of 13 real support messages — the cheat sheet maps each complaint to the right admin action

How did you approach the change?

New admin-only page at /users/flow_diagram with Mermaid.js flowcharts for all 6 account flows
Interactive cheat sheet with 6 expandable cards matching common support messages to admin actions
New toggle-details Stimulus controller for expand/collapse all
Route, controller action, and policy scoped to admin users

UI Testing Checklist

Visit /users/flow_diagram as admin → verify all 6 Mermaid diagrams render
Click "Expand all" / "Collapse all" on cheat sheet → verify toggle works
Click each flow anchor link → verify smooth scroll to correct section
Visit as non-admin → verify access denied

Anything else to add?

Depends on Fix welcome/password flow bugs #1441 for the auth bug fixes referenced in the diagram flows
Diagrams rendered client-side via Mermaid.js CDN (no build dependency)

🤖 Generated with Claude Code

maebeale · 2026-03-27T16:52:40Z

app/views/users/flow_diagram.html.erb

+
+  <%# Triage cheat sheet %>
+  <div class="bg-white border border-gray-200 rounded-xl shadow-sm p-8 mb-6">
+    <div data-controller="toggle-details">


looks right, @jmilljr24 ?

jmilljr24

@maebeale All makes sense to me. This should be super helpful for admins.

If I have this correct, because the welcome confirmation expires in 3 days, anyone from our initial reset that has not confirmed yet will need to contact an admin to get a new confirmation? There are 2400 unconfirmed users right now.

jmilljr24 · 2026-03-27T20:57:44Z

@maebeale All makes sense to me. This should be super helpful for admins.

If I have this correct, because the welcome confirmation expires in 3 days, anyone from our initial reset that has not confirmed yet will need to contact an admin to get a new confirmation? There are 2400 unconfirmed users right now.

I could be mixing the welcome(30) vs regular confirm (3) but I don't know if they are both in play for the initial welcome we did.

Visual reference for admins triaging user account issues — covers invite, resend, password reset, email change, lockout, and unlock flows with an interactive cheat sheet. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Avoids Turbo frame refresh hiding the link. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Matches the card layout pattern used on other admin pages like visits. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Flow 1: Add missing welcome token expiry decision diamond after confirmation — shows redirect to password reset when token expired - Cheat sheet card 6: Fix lock icon incorrectly described as "unconfirmed" — lock means locked, clock means unconfirmed - Fix fa fa-check-circle → fa-solid fa-check-circle (4 occurrences) - Add Font Awesome icons to all flowchart nodes for visual scanning Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

User already received the email so Invite button scenario doesn't apply. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Remove lock icon subcard from "I can sign in but nothing works" — locked users can't sign in, so that scenario belongs in "I'm locked out" card only. Also standardize Access column label text. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Covers the edge case where a user confirmed their email but the welcome token expired before they set a password. Admin fix: send a password reset email. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Fix hover text to "(hover on index for details)" - Remove Invite button reference from clock icon subcards (mutually exclusive) - Simplify locked account and password reset card text - Reorder "No lock icon" options: ban, clock, then forgot password - Make reset/forgot password actions single-line paragraphs - Add "each new reset invalidates previous links" note Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Confirmation links: 3 days → no expiry - Welcome tokens: 30 days → no expiry - Reset links: 6 hours → 7 days - Combine "I forgot my password" and "My reset link expired" cards - Add "I changed my email but can't log in" card for flow 4 - Add legacy note to "confirmed but no password" card - Update all flow diagrams to match new timeout values Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Combine "I forgot my password" and "My reset link expired" cards - Add "I changed my email" card for flow 4 - Add legacy note to "confirmed but can't sign in" card - Swap card 5/6 order - Update all timeouts: confirmation/welcome no expiry, reset 7 days - Fix flow 2: clickable link to flow 1, better "No" label - Various text refinements across cards Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

maebeale · 2026-03-28T13:15:03Z

@jmilljr24 i updated this to latest expirations and flows.

maebeale force-pushed the maebeale/admin-account-flow-diagram branch from b7a1777 to 5fc9e0e Compare March 27, 2026 16:33

maebeale marked this pull request as ready for review March 27, 2026 16:52

maebeale commented Mar 27, 2026

View reviewed changes

maebeale requested a review from jmilljr24 March 27, 2026 16:52

jmilljr24 approved these changes Mar 27, 2026

View reviewed changes

maebeale and others added 17 commits March 28, 2026 08:48

Add admin account flow diagram page

5cb3edc

Visual reference for admins triaging user account issues — covers invite, resend, password reset, email change, lockout, and unlock flows with an interactive cheat sheet. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add flow_diagram view to page_bg_class spec

7668f6d

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add link to account flow diagram from users index

0e05846

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Move flow diagram link next to New User button

7834f86

Avoids Turbo frame refresh hiding the link. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Match flow diagram link style to other text links in app

4c9751a

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Wrap flow diagram page in card, add Home/Users nav links

daf0872

Matches the card layout pattern used on other admin pages like visits. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Swap cheat sheet card order: locked out before forgot password

ea2cd43

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Add hover info labels to invite link subcards for consistency

994eafb

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Make invite link subcards text match invite email card style

854cc80

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Match invite link subcards to invite email card content

602df32

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix invite link card: remove Invite button subcard, clarify expired link

301427d

User already received the email so Invite button scenario doesn't apply. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Fix card 6 and card 3 text

b86de8d

Remove lock icon subcard from "I can sign in but nothing works" — locked users can't sign in, so that scenario belongs in "I'm locked out" card only. Also standardize Access column label text. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Rename reset link card to password reset link

96ce6b6

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Replace card 6 with confirmed-but-no-password scenario

57c51e5

Covers the edge case where a user confirmed their email but the welcome token expired before they set a password. Admin fix: send a password reset email. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

maebeale force-pushed the maebeale/admin-account-flow-diagram branch from 3ca6fdc to b64d737 Compare March 28, 2026 12:53

maebeale merged commit 5112f08 into main Mar 28, 2026
3 checks passed

maebeale deleted the maebeale/admin-account-flow-diagram branch March 28, 2026 13:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add admin account flow diagram page#1442

Add admin account flow diagram page#1442
maebeale merged 18 commits intomainfrom
maebeale/admin-account-flow-diagram

maebeale commented Mar 27, 2026

Uh oh!

maebeale Mar 27, 2026

Uh oh!

jmilljr24 left a comment

Uh oh!

jmilljr24 commented Mar 27, 2026

Uh oh!

maebeale commented Mar 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

maebeale commented Mar 27, 2026

What is the goal of this PR and why is this important?

How did you approach the change?

UI Testing Checklist

Anything else to add?

Uh oh!

maebeale Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

jmilljr24 left a comment

Choose a reason for hiding this comment

Uh oh!

jmilljr24 commented Mar 27, 2026

Uh oh!

maebeale commented Mar 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants