3 ms·
Must be some framework that has this behaviour as default. Else it would be really really bad.
by tiku 6y ago
Must be some framework that has this behaviour as default. Else it would be really really bad.
- mskec 6y agoWhat would be the use case for a framework that returns password reset token to random user requesting password reset of another account. Token must only be available to account owner. A framework like this should not be used.
- woutr_be 6y agoThis seems to be fairly deliberate, the QR code might probably give you some clues. They needed to generate a QR code so the user could just scan it and reset their password.