Ozan

I built password reset in an afternoon and I am not confident it is right - what are the parts people get wrong?

Small application, own authentication. Reset works: you enter your email, you get a link with a token, you set a new password. It has been live for months and I have never gone back to it. Reading about it now, I have a…