Reset flow for account reset

[imaginator]

Another question:
Another question: Why the reset password doesn't require authentication (according to http://buddycloud.com/slate-api#reset-password)? If some knows our buddycloud url & username, it's easy for them to resetting user password right?
CMIIW
Visitor • 8 mins
indeed that is an issue and we're going to change it.
I'll log an issue for that now.
6 mins
Simon Tennant
Visitor Four
Ok, right now i'm trying to create a library for buddycloud API (againts your hosting platform), and if found an issues, can i just paste it in here right?
buddycloud REST API

[abmargb]

The reset endpoint can't require authentication in anyway. On the other hand, we need to improve the reset flow so we don't send plain text passwords to the user's inbox.

I'm closing this in favour of #166.