Forgot password email validity window minds#5174

Ticket(s) / Related Merge Requests

minds#5174

Summary of Changes

Add validity window for forgot password emails, using Redis.

Testing Considerations

• Reset password works.
• Reset password works a second time.
• Already used password reset emails do not work.
• When spawning 3 reset password emails, picking the first one lets you reset password.
• When spawning 3 reset password emails, picking the middle one lets you reset password.
• When spawning 3 reset password emails, picking the last one lets you reset password.
• Reset password works after cache refresh.
• A new account can log out and reset their password.

Deployment Considerations

Standard deployment.

Regression Scope

Forgot password requests for requesting and resetting.

Platform Affected (web, mobile, etc)

Web.

Developer Testing Completed

Manual, unit (phpspec).

Screenshots / Screen Recording

N/A

Does this impact

• Localization
• Dark/light mode
• Guest mode

Definition of Done Checklist

• The Acceptance Criteria has been met
• Code is tested: Testing includes unit/spec, E2E/automated and manual testing
• Merge requests description has been filled out