MerginMaps / server / 36561611579

93%

master: 93%

Build Type

Pull #687

github

Committed by varmar05

Commit Message

Make password reset tokens single-use

Bind each token to a random nonce stored on the user. Requesting a reset
rotates the nonce, revoking older links; any password change clears it,
so a link works once and dies on a logged-in password change.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Pull Request Pull Request #687: Make password reset tokens single-use

Coverage Stats

86 of 86 new or added lines in 6 files covered. (100.0%)

16 existing lines in 2 files now uncovered.

10403 of 11223 relevant lines covered (92.69%)

0.93 hits per line