Closed Slendy closed 10 months ago
This PR adds an expiration for password reset tokens (they used to live forever apparently) and also prevents someone from generating a new password reset request unless the old one has been removed either manually or after the automated 24h period.
My inbox thanks you :(
m88youngling
commented
10 months ago
This PR adds an expiration for password reset tokens (they used to live forever apparently) and also prevents someone from generating a new password reset request unless the old one has been removed either manually or after the automated 24h period.