PEC-CSS / acm-website-backend

Backend of the official website of PEC ACM CSS
MIT License
18 stars 2 forks source link

expire verification token #94

Closed harasees-singh closed 8 months ago

harasees-singh commented 8 months ago

GET /v1/user/forgot-password creates a new verification token which is sent out through email to the user. It is deleted once password is changed successfully. user can potentially bloat the db with these tokens by making continuous GET requests.