darkmsph1t / _spartan

npm project to package & configure common security middleware && add security.js file to code repo
5 stars 0 forks source link

Expire emails in reset flow #88

Open darkmsph1t opened 5 years ago

darkmsph1t commented 5 years ago

Is your feature request related to a problem? Please describe. Firebase doesn't provide clear/configurable expiration of reset emails which is a security risk

Describe the solution you'd like After reset email is sent, invalidate the link if the user doesn't click within a configurable time period

Why does this feature belong in _spartan? It contributes to completeness of firebase support

Describe alternatives you've considered A clear and concise description of any alternative solutions or features you've considered.

Additional context Add any other context or screenshots about the feature request here.