You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Did you check to see if this issue already exists?
Is this only a feature request? Do not put multiple feature requests in one issue.
Is this a backend issue? Use the lemmy-ui repo for UI / frontend issues.
Is your proposal related to a problem?
Right now, password reset tokens, which used to use randomly generated UUIDs, are now being pointlessly hashed using SHA256. These tokens shouldn't live more than a day, and are only emailed to that users email directly, so hashing is pointless here.
Describe the solution you'd like.
The resets should:
Just use and check postgres-generated UUID columns.
Add a scheduled job to delete these reset rows after a day.
Requirements
Is your proposal related to a problem?
Right now, password reset tokens, which used to use randomly generated UUIDs, are now being pointlessly hashed using SHA256. These tokens shouldn't live more than a day, and are only emailed to that users email directly, so hashing is pointless here.
Describe the solution you'd like.
The resets should:
Describe alternatives you've considered.
N/A
Additional context
#3388
The text was updated successfully, but these errors were encountered: