1
0
Fork 0
mirror of synced 2024-06-02 10:54:44 +12:00

Updated docs

This commit is contained in:
Eldad Fux 2020-02-10 07:15:45 +02:00
parent 1ed8105ac6
commit 9d086c78e4
3 changed files with 2 additions and 6 deletions

4
.env
View file

@ -1,4 +0,0 @@
TESTS_FACEBOOK_APP_ID=dbase
TESTS_FACEBOOK_APP_KEY=SDASDHAJSHDAJSHDJHSD
DB_PW=dbpassword
DB_ROOT_PW=dbrootpw

View file

@ -1 +1 @@
Sends the user an email with a temporary secret key for password reset. When the user clicks the confirmation link he is redirected back to your app password reset URL with the secret key and email address values attached to the URL query string. Use the query string params to submit a request to the /auth/password/reset endpoint to complete the process.
Sends the user an email with a temporary secret key for password reset. When the user clicks the confirmation link he is redirected back to your app password reset URL with the secret key and email address values attached to the URL query string. Use the query string params to submit a request to the [PUT /account/recovery](/docs/account#updateRecovery) endpoint to complete the process.

View file

@ -1,3 +1,3 @@
Use this endpoint to complete the user account password reset. Both the **userId** and **secret** arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the /auth/recovery endpoint.
Use this endpoint to complete the user account password reset. Both the **userId** and **secret** arguments will be passed as query parameters to the redirect URL you have provided when sending your request to the [POST /account/recovery](/docs/account#createRecovery) endpoint.
Please note that in order to avoid a [Redirect Attack](https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.md) the only valid redirect URLs are the ones from domains you have set when adding your platforms in the console interface.