Skip to content
Commit db4cb1dd authored by Lukas Reschke's avatar Lukas Reschke
Browse files

Expire token after 12h and if user logged-in again

As an hardening measure we should expire password reset tokens after 12h and if the user has logged-in again successfully after the token was requested.
parent 510010e7
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment