nrbnlulu / strawberry-django-auth

Authentication system for django using strawberry

https://nrbnlulu.github.io/strawberry-django-auth/

MIT License

68 stars 31 forks source link

Reset password link can be used multiple times #536

Open LinnaViljami opened 6 months ago

LinnaViljami commented 6 months ago

Prerequisites

Feel free to just say what you want and remove this template.

[x] Is it a bug?
[ ] Is it a new feature?
[ ] Is it a question?
[x] Can you reproduce the problem?
[x] Are you running the latest version?
[x] Did you check for similar issues?
[x] Did you perform a cursory search?

For more information, see the CONTRIBUTING guide.

Description

Reset password link should be revoked after once used successfully

Steps to Reproduce

Create user with password
Request reset password link
Use reset password link and set new password
Use te same reset password link again and set password again

Expected behavior

Reset password link should not be possible to use multiple times

Actual behavior

Password can be reset multiple times using the same reset password link