Activity #3474
closed
- Status changed from Rejected to New
User Requests Password Reset
- The user submits their email.
- Validate if the email exists in the system.
- Generate a password reset token.
- Save the token in the database with an expiration time (create new table).
- Send an email with the reset link.
User receiving mail, clicks the Link
The link contains the reset token.
- Validate the token:
- Check if it exists.
- Check if it’s expired.
- If valid, show a password reset form.
User Sets a New Password
- Validate the new password.
- Encrypt the password and update it in the database.
- Invalidate the reset token.
- Tracker changed from Sub module to Activity
- Status changed from New to Rejected
Currently handled through as admin managed feature.
Also available in: Atom
PDF