pages/admin/reset.md

---
title: Reset password
expires: 0
access:
  admin.login: false


forms:
  admin-login-reset:
    type: admin
    method: post

    fields:
      username:
        type: text
        placeholder: PLUGIN_ADMIN.USERNAME
        readonly: true
      password:
        type: password
        placeholder: PLUGIN_ADMIN.PASSWORD
        autofocus: true
      token:
        type: hidden
---
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00			`---`
			`title: Reset password`
Fixed proxy/browser caching issues in admin pages 2020-09-14 13:46:59 +03:00			`expires: 0`
Greatly improve login related actions for Admin * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it 2021-03-26 14:39:37 +02:00			`access:`
			`admin.login: false`


			`forms:`
			`admin-login-reset:`
			`type: admin`
			`method: post`
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00
			`fields:`
Greatly improve login related actions for Admin * Better isolate admin to prevent session related vulnerabilities * Removed support for custom login redirects for improved security * Shorten forgot password link lifetime from 7 days to 1 hour * Fixed login related pages being accessible from admin when user has logged in * Fixed admin user creation and password reset allowing unsafe passwords * Fixed missing validation when registering the first admin user * Fixed reset password email not to have session specific token in it 2021-03-26 14:39:37 +02:00			`username:`
			`type: text`
			`placeholder: PLUGIN_ADMIN.USERNAME`
			`readonly: true`
			`password:`
			`type: password`
			`placeholder: PLUGIN_ADMIN.PASSWORD`
			`autofocus: true`
			`token:`
			`type: hidden`
forgot password [fixes #28] 2015-04-20 16:01:20 +02:00			`---`