Forgot Password

• Screen: SCR-IDP.39 — Forgot Password Landing
• Use case: UC-IDP.22 — Forgot Password

Entry screen of the forgot-password flow — user selects an OTP delivery channel (Email OTP or Mobile OTP) first, then the system shows the contact field matching the chosen channel; pressing "Continue" makes the system look up the account and send the OTP. Handles inline errors for: account not found (AF 4A), Google-SSO-only account (AF 4B), suspended account (AF 4C), and OTP send failure (AF 5A) — all shown inline without navigating away.

• otp_channel "OTP Delivery Method" — enum {email_otp, mobile_otp} · required · always visible · default email_otp · both channels shown (learner)
• email "Email" — text · required & visible when otp_channel == email_otp · validation: format:email, max_length:255
• country_code "Country code" — text · read-only · default "+856" · required & visible when otp_channel == mobile_otp
• mobile_number "Mobile Number" — phone · required & visible when otp_channel == mobile_otp · validation: format:phone
• inline_message "Notification Message" — text · read-only · visible when form_error != null · values: account_not_found / google_only / account_suspended / otp_send_failed

• continue "Continue" — enabled when required_fields_valid · triggers UC-IDP.22-M-4 → SUC-IDP-01 or SUC-IDP-02 (/authenticate-via-email-otp or /authenticate-via-mobile-otp, returnUrl=/forgot-password/reset-password)
• back_to_login "Back to Login" — always enabled → /login-learner/
• go_to_register "Sign up" — always enabled → /register-as-learner/

1. For email_otp → show only the email field (text, format:email); for mobile_otp → show country_code (+856, read-only) and mobile_number (phone) side by side — same pattern as the sign-up screen (SCR-IDP.01). [refs: —]
2. All error cases (account not found, Google-SSO-only, suspended, OTP send failure) must be shown inline in the "Inline message" region — the page must not navigate; the user can edit and retry immediately. [refs: —]