Reset password ( token expired ) get send out to user who have no reset password token and reset password key

Description

{domain.com}/login/reset-password.html will trigger to sent out reset password email to user who have no reset password token or reset password key.

We should add the checking on the exists of the above 2 fields before allow to proceed for token validation and send out email

Environment

None

Assignee

Dominic Watson

Reporter

Johnson Cheng

Labels

None

Accepted

Yes

Fix versions

Priority

Highest
Configure