[Question]: Doubt about the use of a code or link

pilcrowonpaper / copenhagen

A basic guideline on implementing auth for the web

https://thecopenhagenbook.com

MIT License

1.33k stars 37 forks source link

[Question]: Doubt about the use of a code or link #25

Open Mateleo opened 2 weeks ago

Mateleo commented 2 weeks ago

Is it better to use a code or a link for the password reset flow? The guide seems to specify that the link is the most common, yet in the email verification section, it's strongly recommended to use a code. How do I go about this?

pilcrowonpaper commented 2 weeks ago

I will update the page, but you'd have to implement sessions just for password reset. Verify OTP => verify MFA => enter new password.