How to correctly implement a password recovery method using a unique key?

Question

Laravel

Good afternoon, everyone

can have an up-to-date info on how to make a password recovery method by email on laravel where does the unique key for resetting the password come from?

Answer 1

Lately, we've been doing it with signed urls.
https://laravel.com/docs/8.x/urls#signed-urls

use Illuminate\Support\Facades\URL;

return URL::temporarySignedRoute(
    'unsubscribe', now()->addMinutes(30), ['user' => 1]
);

You can set the lifetime, specify the desired user (and other parameters) and not store data in the subd