Wrong message shown when recovering password for non existing user
tdziurko opened this issue · 1 comments
tdziurko commented
Application is displaying "E-mail with reset link sent" message even when we submit non existing user login or e-mail.
pbuda commented
This is actually designed and wanted behaviour. This way you don't know whether such user exists or not. Kind of security stuff. I'd only change "E-mail with reset link sent" to "E-mail with reset link sent if user was found".