Motivation
Anyone (even not logged users) can submit a password reset to any registered user, this can be an annoyance if other than me requested it, then I will forced to change change my password.
Description and Documentation
Delay the password reset until the link sent to the users' email is clicked, this way If the user didn't requested it, the user can just ignore the reset email and keep his/her current password.
Examples
Impact
Implementation
--
Contributors:
Ulises Sánchez - 2014-05-09
Discussion
I like this proposal! Especially needed on a public TWiki.
Would you like to
get involved? You could create a patch and attach it to this proposal topic. Read also
TWikiReleaseManagementProcess, the clock for acceptance starts clicking when you put your name as the committed developer and a commitment date.
--
Peter Thoeny - 2014-05-09