From 0362b0e986303858081f607ffad2e8e14be8775e Mon Sep 17 00:00:00 2001 From: Jacob Walls <38668450+jacobtylerwalls@users.noreply.github.com> Date: Sun, 15 May 2016 18:54:03 -0700 Subject: Fixed #26615 -- Made password reset token invalidate when changing email. Co-Authored-By: Silas Barta --- docs/releases/3.2.txt | 3 +++ 1 file changed, 3 insertions(+) (limited to 'docs') diff --git a/docs/releases/3.2.txt b/docs/releases/3.2.txt index 10842af4fc..232b20cb23 100644 --- a/docs/releases/3.2.txt +++ b/docs/releases/3.2.txt @@ -552,6 +552,9 @@ Miscellaneous ``False`` if the file cannot be locked, instead of raising :exc:`BlockingIOError`. +* The password reset mechanism now invalidates tokens when the user email is + changed. + .. _deprecated-features-3.2: Features deprecated in 3.2 -- cgit v1.3