Skip to content

Allow password reset links to have customized expirations

Warren Gifford requested to merge cloud/configurable-password-reset-life into main

Created by: flying-robot

Partnering with @artemruts

Tasks

  • site configuration supports adjustable password link expiry
  • password link expiry defaults safely to 4 hours
  • password reset flow respects configured expiry
  • actual test performed that confirms link expiry works as intended (send real email and try, etc.)
  • CHANGELOG updated

Open Questions

  • do we want to fail with no rows, or have a separate validation w/error message indicating it expired?
  • do we mention link expiration time and that link can be used only once in customer emails?

fixes https://github.com/sourcegraph/sourcegraph/issues/13999

Merge request reports