Files
habitica/website/server/controllers/api-v3
Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457)
* start work to avoid sending reset password in plaintext via email

* start checking parameters

* fix new password reset email

* render error if password reset code is missing or invalid

* implement POST route, conversion to bcrypt and messages

* add auth.local.passwordResetCode field

* add failing tests, move reset code validation func to lib, fixes, remove old tests

* fix unit tests

* fix page rendering and add integration tests

* fix password reset page

* add integration test

* fix string

* fix tests url
2017-02-14 18:08:31 +01:00
..
2017-01-11 19:16:20 +01:00
2017-01-19 23:02:22 +00:00
2016-10-06 21:45:37 -05:00
2016-10-19 21:31:07 -05:00
2017-02-05 22:32:10 -07:00
2016-12-20 15:32:59 +01:00
2017-01-13 14:06:46 -07:00
2016-11-23 19:34:09 -06:00
2017-02-02 09:08:51 -06:00
2016-11-03 08:31:30 -05:00
2017-01-24 12:28:42 +01:00