Password Reset: Do we need 3 endpoints?

hanakoa / alpaca

Containerized Go µServices for authentication and authorization.

https://hanakoa.github.io/alpaca/

MIT License

5 stars 0 forks source link

Open kevinmichaelchen opened 6 years ago

kevinmichaelchen commented 6 years ago

Right now, GET confirms a usable/unexpired/unused code exists for the given UUID.

PUT performs the actual reset, given an email and new password.

We can probably combine these two. Just pass the code field with the PUT's body.