pilcrowonpaper/copenhagen

email verification & password reset

Closed this issue · 2 comments

You should even mark a user's email address as verified if they reset their password.

This is counter intuitive to me. Why?

Ah, do you mean "...after they have successfully reset their password." instead of "...when they request to reset their password" which is how I first read it.

Yeah, after they reset their password