pages/admin/forgot.md

---
title: Forgot password
expires: 0
access:
  admin.login: false

forms:
  admin-login-forgot:
    type: admin
    method: post

    fields:
      username:
        type: text
        placeholder: PLUGIN_ADMIN.USERNAME
        autofocus: true
        validate:
          required: true
---
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00			`---`
			`title: Forgot password`
Fixed proxy/browser caching issues in admin pages 2020-09-14 13:46:59 +03:00			`expires: 0`
Greatly improve login related actions for Admin * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it 2021-03-26 14:39:37 +02:00			`access:`
			`admin.login: false`

			`forms:`
			`admin-login-forgot:`
			`type: admin`
			`method: post`
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00
			`fields:`
Greatly improve login related actions for Admin * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it 2021-03-26 14:39:37 +02:00			`username:`
			`type: text`
			`placeholder: PLUGIN_ADMIN.USERNAME`
			`autofocus: true`
			`validate:`
			`required: true`
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00			`---`