Send a confirmation email after password reset

OrchardCMS / OrchardCore

Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that framework.

https://orchardcore.net

BSD 3-Clause "New" or "Revised" License

7.41k stars 2.39k forks source link

Send a confirmation email after password reset #7542

Open rjpowers10 opened 3 years ago

rjpowers10 commented 3 years ago

I noticed that ResetPasswordController.ResetPassword doesn't send a confirmation email. Usually you get an email that says something like "Your password has been changed. If you requested this change then no further action is needed. If you did not request this change..."

Maybe AccountController.ChangePassword should do the same.

rjpowers10 commented 3 years ago

This one probably falls under "nice to have", but not high priority right now.