viscous/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2026-04-18 12:10:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Improve validation for password resets

Browse Source
This commit is contained in:
David Bomba
2026-03-28 09:42:10 +11:00
parent d8d004792f
commit 5d95541701
3 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/Auth/ForgotPasswordController.php
View File

@@ -52,6 +52,10 @@ class ForgotPasswordController extends Controller
*/
public function sendResetLinkEmail(Request $request)
{
$request->validate([
'email' => ['required', 'email:dns'],
]);
MultiDB::userFindAndSetDb($request->input('email'));
$user = MultiDB::hasUser(['email' => $request->input('email')]);

1
lang/en/texts.php
View File

@@ -5949,6 +5949,7 @@ $lang = array(
'invalid_routing_id_format' => 'Invalid routing ID format',
'sign_the_document' => 'Sign the document',
'client_not_found_on_peppol_network' => 'Client could not be identified on the PEPPOL network.',
'too_many_requests' => 'Too many requests',
);
return $lang;

2
routes/api.php
View File

@@ -143,7 +143,7 @@ Route::group(['middleware' => ['throttle:api', 'api_secret_check']], function ()
Route::group(['middleware' => ['throttle:login', 'api_secret_check', 'email_db']], function () {
Route::post('api/v1/login', [LoginController::class, 'apiLogin'])->name('login.submit');
Route::post('api/v1/reset_password', [ForgotPasswordController::class, 'sendResetLinkEmail']);
Route::post('api/v1/reset_password', [ForgotPasswordController::class, 'sendResetLinkEmail'])->middleware('throttle:2,1');
Route::post('api/v1/passkeys/login/options', [PasskeyController::class, 'loginOptions'])->name('passkeys.login.options');
});