virtualyou / notification

This is the Notification API for the VirtualYou project
Apache License 2.0
0 stars 0 forks source link

Implement new resource to send email for User update with new password #2

Open dlwhitehurst opened 7 months ago

dlwhitehurst commented 7 months ago

Implement new resource to send an email with a link to return and create a new password in an updated User record. Security here is the most important aspect of this.

Security

  1. Email is sent only if the email exists on "a" User account
  2. Email is sent to the User with Warning Text "Someone is trying to access your account ..."
  3. A link is provided, like Agent and Monitor invitations, but also timely. i.e. the chance to match gobble-dee-gook expires
  4. An opportunity to update (PUT) User is provided and only the password (Bcrypt) can be changed.

Steps

dlwhitehurst commented 7 months ago

This is complete.