Reset password link can be used multiple times
LinnaViljami opened this issue · comments
Prerequisites
Feel free to just say what you want and remove this template.
- Is it a bug?
- Is it a new feature?
- Is it a question?
- Can you reproduce the problem?
- Are you running the latest version?
- Did you check for similar issues?
- Did you perform a cursory search?
For more information, see the CONTRIBUTING guide.
Description
Reset password link should be revoked after once used successfully
Steps to Reproduce
- Create user with password
- Request reset password link
- Use reset password link and set new password
- Use te same reset password link again and set password again
Expected behavior
Reset password link should not be possible to use multiple times
Actual behavior
Password can be reset multiple times using the same reset password link