Laravel Fortify forgot password throttle

laravel / ideas

Issues board used for Laravel internals discussions.

939 stars 28 forks source link

Laravel Fortify forgot password throttle #2603

Closed BartMommens closed 3 years ago

BartMommens commented 3 years ago

Hey all,

I think it would be nice to have a fogot password throttle available out of the box (like login). Currently this can be used to brute force information gain about registered email addresses. Combined with extensive rainbowtables with password combinations and (lazy users) out there this can lead to compromised accounts.

themsaid commented 3 years ago

Feel free to submit a PR for review. Thanks