Graham McIntire
00aad3cb98
Add a "Forgot your password?" flow off the login page. A 24-hour reset_password token is emailed on request, the landing page lets the user pick a new password, and all other tokens for the user are revoked on success. The request endpoint returns the same flash regardless of whether the email matches a user so that attackers can't enumerate accounts.
5 lines
134 B
Elixir
5 lines
134 B
Elixir
defmodule MicrowavepropWeb.UserResetPasswordHTML do
|
|
use MicrowavepropWeb, :html
|
|
|
|
embed_templates "user_reset_password_html/*"
|
|
end
|