If a user has located their account (so they know its username and id), but does not know their password (nor have a 1FA authentication method added, like CTAP2), they are unable to acquire the e-mail address of the account by merely appending .json to the relevant profile URI.
Consequently, how are they to request a password reset, considering that the password reset form requires an e-mail address; it does not accept a username?
they can search their various email accounts for the forum domain? how many email addresses do they have? 
If all else fails…
a**********t@*****.com? sometimes that’s enough to help (but also does leak a little info, so they might not)Staff users can see a user’s email address that they registered with. The staff can tell the user what their email is, so that the user can log in.
Email cannot be viewed in the JSON. In fact, it’s quite hidden, even for staff (i.e. behind the ‘Show’ button), and is logged IIRC into staff logs.
Is that possible?
@awesomerobot and @NateDhaliwal, the problem with these approaches is that I recently experienced this at community.openAI.com, because I utilise an e-mail alias service, as many nowadays do. Though, it would be worse if one had merely sub-addressed their e-mail address, which is common practice, as that would be infeasible to remember. [1] Unfortunately, no avenue of contact is provided to the moderators, as is true for many Discourse instances, and another problem.
Had I not been able to discover my e-mail address, I would have been out of luck.
It does accept a username, though.
The first form field prompts for email or username.
The link below the first field works, regardless of whether you supplied the email or the username.
The I forgot my password link also works for either username or email, unless the Admins have enabled the Hide email address taken site setting.
On the OpenAI site, the forgot password form requires an email, but on another site where that setting is disabled, the form allows the entry of the username:
So unless I’m misunderstanding your request, it sounds like we already support what you are requesting.
