search

PencilCode / pencilcode

An online IDE for kids: pencilcode.net.
http://dev.pencilcode.net/
MIT License
167 stars 100 forks source link

Password recovery email address. #13

Open davidbau opened 10 years ago

davidbau commented 10 years ago

Implement a password-recovery email flow.

Two possibilities here. We could just allow it without verification - trust our users.

Or we could suggest collection of an email address at signup. Although COPPA prohibits retention of an email address as part of the account, it does allow retention of an email address hash. This would be enough to permit an email address to be re-entered and verified during a password-recovery flow.

Originally PencilCode/jquery-turtle#14.

weihang7 commented 10 years ago

Or a question for verification?