This repository was archived by the owner on Dec 27, 2024. It is now read-only.
This repository was archived by the owner on Dec 27, 2024. It is now read-only.
Option to return 404 on forgot password when user is not found #13
Currently, the system fails silent so as to not leak information if a forgot password request is made for a user that doesn't exist.
Some implementers may want to prioritize UX over security and indicate that the email address isn't found.