diaspora/diaspora — Issue #2778: Users who haven't accepted their invitation can reset their password
Author: sarahmei
Created: 2012-01-30 00:07:17+00:00
State: open

We create a user in the database for each person who's invited. If they have not yet accepted the invitation, then they have no username and no password. However, they can still try to reset their password. They get the normal reset password email, and they can click the link to get the reset password page, but the actual reseting fails validation because they have no username.

We should not send reset password emails to users that haven't accepted their invitation yet. Maybe we should instead resend their invitation email.