Matteo Pagliazzi
|
d30e7b9251
|
Don't send plaintext reset passwords via email (#8457)
* start work to avoid sending reset password in plaintext via email
* start checking parameters
* fix new password reset email
* render error if password reset code is missing or invalid
* implement POST route, conversion to bcrypt and messages
* add auth.local.passwordResetCode field
* add failing tests, move reset code validation func to lib, fixes, remove old tests
* fix unit tests
* fix page rendering and add integration tests
* fix password reset page
* add integration test
* fix string
* fix tests url
|
2017-02-14 18:08:31 +01:00 |
|