Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457) ...

* start work to avoid sending reset password in plaintext via email

* start checking parameters

* fix new password reset email

* render error if password reset code is missing or invalid

* implement POST route, conversion to bcrypt and messages

* add auth.local.passwordResetCode field

* add failing tests, move reset code validation func to lib, fixes, remove old tests

* fix unit tests

* fix page rendering and add integration tests

* fix password reset page

* add integration test

* fix string

* fix tests url

2017-02-14 18:08:31 +01:00

21 KiB

Raw Blame History

View Raw