J
J
JackShcherbakov2018-04-02 23:44:07
Web development
JackShcherbakov, 2018-04-02 23:44:07

How to properly implement a password change system?

Hello colleagues!
How to properly organize the work of such an algorithm:

  1. User forgot password
  2. The user clicks on the "recover password" button
  3. The user is sent an email with a link to the recovery page, which will no longer be relevant after 15 minutes.

I do not quite understand how to generate this very temporary page and how to get rid of it when it is no longer relevant.
I would like to thank everyone in advance who will help.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
A
Alexander, 2018-04-02
@JackShcherbakov

It is not necessary to generate the entire page, but just some kind of recovery key and send this key to the recovery page with a GETrequest. And in the letter just generate a link to the recovery page with this key.
Get something like this.
https://mysite.com/account/recovery?key=ABCD

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question