How to properly implement account verification and password recovery?

Question

MySQL

You need to confirm your account by email and reset your password. In both cases, you need to generate a link, send it to the user's mail, and when the user clicks on the link, determine who it is. There is an idea to add jwt to the link and then extract the necessary data from it. Is this the right way to do it or should it be done differently?

Answer 1

Just a hash from a valid name plus a microtime, write the hash to the database and send a link with this hash as a get parameter. We check that Vasya came with the right hash, let Vasya change the password / email.