email verification & password reset
Closed this issue · 2 comments
pekeler commented
You should even mark a user's email address as verified if they reset their password.
This is counter intuitive to me. Why?
pekeler commented
Ah, do you mean "...after they have successfully reset their password." instead of "...when they request to reset their password" which is how I first read it.
pilcrowonpaper commented
Yeah, after they reset their password