From f88ee4a9523bf3c4a61a45832963c558aed4d0b1 Mon Sep 17 00:00:00 2001 From: Nassim Bounouas Date: Wed, 18 Dec 2019 09:59:00 +0100 Subject: Feature/password reset link expiration (#2305) * #1928 Add a sentence indicating the reset time limit on form and email * #1928 Customizable password reset lifetime * #1928 Add a route to verify reset link and call it on reset form init * Revert "#1928 Customizable password reset lifetime" This reverts commit 0ed97453f8e64e31a723cc6740b251a69a57d658. * #1928 Reset password lifetime hardcoded to one hour * Remove useless modifications for #1928 --- server/lib/emailer.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'server/lib/emailer.ts') diff --git a/server/lib/emailer.ts b/server/lib/emailer.ts index 523b11d0d..7484524a4 100644 --- a/server/lib/emailer.ts +++ b/server/lib/emailer.ts @@ -369,7 +369,7 @@ class Emailer { addPasswordResetEmailJob (to: string, resetPasswordUrl: string) { const text = `Hi dear user,\n\n` + `A reset password procedure for your account ${to} has been requested on ${WEBSERVER.HOST} ` + - `Please follow this link to reset it: ${resetPasswordUrl}\n\n` + + `Please follow this link to reset it: ${resetPasswordUrl} (the link will expire within 1 hour)\n\n` + `If you are not the person who initiated this request, please ignore this email.\n\n` + `Cheers,\n` + `${CONFIG.EMAIL.BODY.SIGNATURE}` -- cgit v1.2.3