DaanHoogland commented on issue #13604:
URL: https://github.com/apache/cloudstack/issues/13604#issuecomment-5089778875

   > * Allowing a user to re-request a new password reset token and reset the 
TTL window using the new token (my desired outcome, and what I'd expect 
end-users would be familiar with).
   > * If not the above, then wait for the email to be successfully queued/sent 
and return the success from that. If the email isn't sent due to the token 
being within the TTL, then return a user-friendly message that they cannot 
request a new token until a specified datetime.
   
   I think a third option could be
   * if within the ttl window, resend the existing token.
   
   that said handling the silent fail is the major issue.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to