Files
danbooru/app/models
evazion 5625458f69 users: refactor password reset flow.
The old password reset flow:

* User requests a password reset.
* Danbooru generates a password reset nonce.
* Danbooru emails user a password reset confirmation link.
* User follows link to password reset confirmation page.
* The link contains a nonce authenticating the user.
* User confirms password reset.
* Danbooru resets user's password to a random string.
* Danbooru emails user their new password in plaintext.

The new password reset flow:

* User requests a password reset.
* Danbooru emails user a password reset link.
* User follows link to password edit page.
* The link contains a signed_user_id param authenticating the user.
* User changes their own password.
2020-03-08 23:18:15 -05:00
..
2018-05-15 14:19:45 -07:00
2020-03-06 17:06:29 -06:00
2020-03-08 23:18:15 -05:00
2020-02-24 22:42:59 -06:00
2020-03-06 17:06:29 -06:00
2020-03-06 17:06:29 -06:00
2020-02-23 17:52:38 -06:00
2020-03-08 23:18:15 -05:00
2020-03-06 17:06:29 -06:00