Graham McIntire
00aad3cb98
Add a "Forgot your password?" flow off the login page. A 24-hour reset_password token is emailed on request, the landing page lets the user pick a new password, and all other tokens for the user are revoked on success. The request endpoint returns the same flash regardless of whether the email matches a user so that attackers can't enumerate accounts. |
||
|---|---|---|
| .. | ||
| agent_skills_controller_test.exs | ||
| api_catalog_controller_test.exs | ||
| beacon_monitor_controller_test.exs | ||
| error_html_test.exs | ||
| error_json_test.exs | ||
| health_controller_test.exs | ||
| page_controller_test.exs | ||
| user_registration_controller_test.exs | ||
| user_reset_password_controller_test.exs | ||
| user_session_controller_test.exs | ||
| user_settings_controller_test.exs | ||