myrunes / backend

REST API backend and database bindings for myrunes.com - crafted with Go
https://myrunes.com
Other
9 stars 1 forks source link

Changing mail address does not require current password #15

Closed zekroTJA closed 4 years ago

zekroTJA commented 4 years ago

Changing the accounts mail address should, as same as all other account settings, check and validate the current password to avoid abuse of already logged in sessions.