Scam Alert is an open-source platform where users can share and alert others about new types of scams. The goal is to create a community-driven space to identify and report various scam attempts, helping to protect people from fraud.
If user forgets password while logging in and uses forgot password option, currently the website verifies the user to reset password by checking if it is logged in or not which they are obviously not.
It should be changed to email verification or secondary question method,
Happy to resolve it
Shu12388y
commented
1 month ago
ISSUE NAME
Forgot Password Flow
ISSUE DESCRIPTION
If user forgets password while logging in and uses forgot password option, currently the website verifies the user to reset password by checking if it is logged in or not which they are obviously not. It should be changed to email verification or secondary question method, Happy to resolve it
https://github.com/user-attachments/assets/9fc2b74a-2d66-451e-b3a8-7634b2b65972