Commit History

Author SHA1 Message Date
  Shane Kilkelly 6e282ab308 clear sessions on password reset 10 years ago
  James Allen 1e8ab5357b Improve pre-registered account activation process 11 years ago
  Shane Kilkelly 0aaeb6671e Keep password reset token in session, and strip it from reset page url. 11 years ago
  Henry Oswald 3ecf201eda send -> sendStatus 11 years ago
  Henry Oswald 9764ab258b added complex password validation to password resets 11 years ago
  Henry Oswald 56efefd6d4 renamed variable 12 years ago
  James Allen accd8207b2 Show password reset expired message rather than server error if that's what has happened 12 years ago
  James Allen 10021986c5 Don't error on password reset if no email found, and translate error messages 12 years ago
  Henry Oswald d047d44079 Changed the error messages which are sent down to the client to be translated first 12 years ago
  Henry Oswald 1b8c8b8c48 sorted out titles 12 years ago
  James Allen 5aa7daa951 Fix password reset rate limit to work on ip, not email which changes every request 12 years ago
  Henry Oswald dabed896be lowercase password reset email 12 years ago
  Henry Oswald 9419d3a0e5 hooked up the frount end ui to show the email can not be found, 12 years ago
  Henry Oswald bf1bb22afd added rate limiting to password reset endpoint 12 years ago
  Henry Oswald 9f901fb1ba added the token generator and its getNewToken function 12 years ago
  Henry Oswald 64688e661d written password reset controller 12 years ago
  Henry Oswald 551e1d465a written password reset handler 12 years ago