5 ms·
You should allow to reset password to the users without authentication (and therefore without authorization). That's the nature of password reset link.
by dennisgorelik 10y ago
You should allow to reset password to the users without authentication (and therefore without authorization).
That's the nature of password reset link.
- sopooneo 10y agoOh of course. Good point.