Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use e-mail to identify instead of login in reset password #46

Closed
apragacz opened this issue Apr 23, 2019 · 2 comments
Closed

Use e-mail to identify instead of login in reset password #46

apragacz opened this issue Apr 23, 2019 · 2 comments

Comments

@apragacz
Copy link
Owner

From issue #38:

I will recommend using the email instead of the username to find the user to whom the reset password link is sent. That way only the user (and anyone who knows his email address) can request the reset password link to be sent.

@apragacz
Copy link
Owner Author

This feature will be released in version 0.4.5.

apragacz added a commit that referenced this issue May 18, 2019
Changes:

* Resolved issue #48: Allowing to use custom user field for verification
* Resolved issue #46: added
  SEND_RESET_PASSWORD_LINK_SERIALIZER_USE_EMAIL setting
* Resolved issue #50: customizable send reset password link serializer
* Fixed reset password in case user is unverified and one-time use is enabled
@lock
Copy link

lock bot commented May 20, 2020

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@lock lock bot locked as resolved and limited conversation to collaborators May 20, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant