Skip to content
This repository was archived by the owner on Mar 10, 2025. It is now read-only.
This repository was archived by the owner on Mar 10, 2025. It is now read-only.

Account Token #21

Description

@dstoffel

Token : change email/reset password

These token should not be constructed with a JSON Web Signature because it is vulnerable to an offline bruteforce attack and it provide the ability to take over any account .

These tokens must be generated randomly, saved into users db and cleared once the new password/email was confirmed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions