search

si / domiary

Keep a diary of domain registrations and expirations
0 stars 1 forks source link

Reset password from token #38

Closed si closed 10 years ago

si commented 10 years ago

Final part of forgotten email user journey now that email is sent to the user with a token to reset it.

COA

  1. Token must still be valid (decode, split by colon, check date is today)
  2. User must enter password twice
  3. New password must be validated
  4. Token is cleared out once complete
  5. Email sent to user of updated password
  6. Session flash tells user their password is updated