 Shane Kilkelly
|
6e282ab308
clear sessions on password reset
|
10 years ago |
 James Allen
|
1e8ab5357b
Improve pre-registered account activation process
|
11 years ago |
|
Shane Kilkelly
|
0aaeb6671e
Keep password reset token in session, and strip it from reset page url.
|
11 years ago |
 Henry Oswald
|
3ecf201eda
send -> sendStatus
|
11 years ago |
|
James Allen
|
accd8207b2
Show password reset expired message rather than server error if that's what has happened
|
12 years ago |
|
James Allen
|
10021986c5
Don't error on password reset if no email found, and translate error messages
|
12 years ago |
|
Henry Oswald
|
d047d44079
Changed the error messages which are sent down to the client to be translated first
|
12 years ago |
|
Henry Oswald
|
dabed896be
lowercase password reset email
|
12 years ago |
|
Henry Oswald
|
bf1bb22afd
added rate limiting to password reset endpoint
|
12 years ago |
|
Henry Oswald
|
9f901fb1ba
added the token generator and its getNewToken function
|
12 years ago |
|
Henry Oswald
|
64688e661d
written password reset controller
|
12 years ago |
|
Henry Oswald
|
551e1d465a
written password reset handler
|
12 years ago |
