java - how to implement the create new password functionality directly from user's email -
i trying implement scenario in new user has been created in application admin.
1st step user has allotted temporary password , receives email activation link
user clicking on link taken create new password page , creates new password , thats it.
now query how application knows user ,just clicking activation link in email
activation links carry long token, such activate.jsp?tok=98357627272357852786276258763427934579342579342793426734279. token can randomly selected, , stored in database. when page loaded, token looked up, , correct user gets authenticated. token may deleted database.
Comments
Post a Comment