Matteo Pagliazzi d30e7b9251 Don't send plaintext reset passwords via email (#8457) ... * start work to avoid sending reset password in plaintext via email * start checking parameters * fix new password reset email * render error if password reset code is missing or invalid * implement POST route, conversion to bcrypt and messages * add auth.local.passwordResetCode field * add failing tests, move reset code validation func to lib, fixes, remove old tests * fix unit tests * fix page rendering and add integration tests * fix password reset page * add integration test * fix string * fix tests url		2017-02-14 18:08:31 +01:00
..
api-v3	Don't send plaintext reset passwords via email (#8457)	2017-02-14 18:08:31 +01:00
top-level	Don't send plaintext reset passwords via email (#8457)	2017-02-14 18:08:31 +01:00