search

MIT-LCP / waveform-annotation

Platform for annotating physiological waveform data.
11 stars 4 forks source link

Adds email requirement to account registration and recovery #12 #14

Closed Lucas-Mc closed 3 years ago

Lucas-Mc commented 3 years ago

This change requires the user to submit a preferred email address when signing up with a new account. This will allow us to:

  1. Prevent outside users from registering given we have a list of expected emails (TODO #13)
  2. Recover a user's account by using their account email instead of them giving their email which has security holes (DONE)

One TODO is that the account recovery email should generate a token which expires once the user changes their password and successfully logs in but, since we currently don't have a last_login field for the user, I chose to generate a token which expires after an hour.

Fixes #12.