search

PerceptumNL / edubox-platform

(active) backend for eduraam
0 stars 1 forks source link

Add email change recovery #54

Open mslatour opened 8 years ago

mslatour commented 8 years ago
  1. User (or imposter) changes email
  2. System sends link to new email to verify
  3. System sends explanation to old email indicating change, and link to interrupt change
  4. User clicks on interruption link to stop change

This to stop scenario where an imposter manages to get access to someones account (via their laptop for example) and changes the email address, making it impossible for the real user to reset his password