Skip to content

Feature Request: Expire time for password reset mails hardcoded into forget/reset password #184

Open

Description

@patrickatwsrn

There doesn't seem to be a way to set an expiration time for password recovery links.

From what I have learned, there seems to be a two hour limit. Which might be so short or to long for some use cases.

There is a discussion about this from 2022 with a solution, but it requires hacking changes into

  • core/components/login/controllers/web/ForgotPassword.php
  • core/components/login/controllers/web/ResetPassword.php

Source: https://community.modx.com/t/logins-resetpassword-how-long-do-you-have-before-it-expires-cache-dependent/4950/2

It would be great to have system setting or even a parameter for this setting.

Regards,

Patrick

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions