Wednesday, December 3, 2014

Re: Intuition about (potentially) sending multiple password reset emails

The password reset form asks for an email address, not username. (This is assuming default Django User model.) The email address may be associated with more than a single User on the system -- there is no requirement (by default) that the user email address be unique. So a password reset email is generated for each matching user, and the information presented in each email includes the specific username for which the reset link applies.

Karen

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/CACS9raeXK_WhkWXq0fCcxEcUFoOHD0XFV0kz4nc7n8%2B%2BRT4j4g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment