Well, he would get the perfect error message and request the link again :-)
And BTW the shuttle stays about 1/2 hour in the tunnel...


On Sun, Mar 2, 2014 at 9:34 PM, Cyril Lacôte <notifications@github.com>wrote:

> In app/controllers/Login.java:
>
> > +     * containing a link that will trigger Login.newPassword()
> > +     *
> > +     * @param email
> > +     */
> > +    public static void requestPasswordReset(@Email @Required String email) {
> > +        if (Validation.hasErrors()) {
> > +            render(email);
> > +        }
> > +
> > +        if (Member.findByEmail(email) == null) {
> > +            Validation.addError("email", Messages.get("login.email.unknown"));
> > +            render(email);
> > +        }
> > +
> > +        String passwordResetCode = Codec.UUID();
> > +        Cache.add(passwordResetCode, email, "1h");
>
> Maybe 1H is too short (think about a man resetting his Mix-IT password
> from his smartphone JUST BEFORE ENTERING THE SHUTTLE TO UK : he would be
> doomed). 1d at least, no?
>
> --
> Reply to this email directly or view it on GitHub<https://github.com/mix-it/linkit/pull/190/files#r10197323>
> .
>