Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Ask HN: Strategy for password reset email vs URL to reset pwd.
The token is included in the link sent to them (via email) that directs them to where they can reset their password.
The token is only valid for 24 hours and is unique so it can be authenticated against their email when they're resetting their password.
If someone logs into that account in the meantime, the token is removed and the link to resetting their password becomes invalid.
There are no comments on this comment yet.
The token is included in the link sent to them (via email) that directs them to where they can reset their password.
The token is only valid for 24 hours and is unique so it can be authenticated against their email when they're resetting their password.
If someone logs into that account in the meantime, the token is removed and the link to resetting their password becomes invalid.