jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
12,030 Commits 1 Branch 0 Tags
80faee67db2de33e6e62e2b7fc942ecc5ec85cde
Commit Graph

3 Commits

Author SHA1 Message Date
evazion
e72073ca6b emails: update email templates. 
* Add header with the Danbooru name and logo.
* Add footer with links to the site, the privacy policy, and the contact page.
* Add "You received this email because of X" messages to remind users why
  they received the email.
* Add basic CSS to make the design match the site.
 2022-09-28 00:29:50 -05:00
evazion
eb83f04dfb Fix #4272: Prevent password reset spam. 
Remove username from password reset email. A rate limit was previously
added in 4542f3802.
 2022-05-02 16:41:12 -05:00
evazion
5625458f69 users: refactor password reset flow. 
The old password reset flow:

* User requests a password reset.
* Danbooru generates a password reset nonce.
* Danbooru emails user a password reset confirmation link.
* User follows link to password reset confirmation page.
* The link contains a nonce authenticating the user.
* User confirms password reset.
* Danbooru resets user's password to a random string.
* Danbooru emails user their new password in plaintext.

The new password reset flow:

* User requests a password reset.
* Danbooru emails user a password reset link.
* User follows link to password edit page.
* The link contains a signed_user_id param authenticating the user.
* User changes their own password.
 2020-03-08 23:18:15 -05:00