4 ms·
For 1), How would password resets work? Wouldn't you need more than just their email? For 2), This sounds like a bad idea for anyone sharing their screen, they
by spartanatreyu 6y ago
For 1), How would password resets work? Wouldn't you need more than just their email?
For 2), This sounds like a bad idea for anyone sharing their screen, they could broadcast the url or even just share a link not understanding how it works and lose control of their own account. Also this would only work for users who use bookmarks.
- throwaway015089 6y ago1) A new password is accepted using an email validation and the previous hash is replaced 2) The url with token is used only for logging in and the user is forwarded to the home, just like the email confirmation links in emails