This repository was archived by the owner on Jul 30, 2024. It is now read-only.
This repository was archived by the owner on Jul 30, 2024. It is now read-only.
reset_password Allows Unconfirmed Users to Login #298
Description
If confirmation is required the user cannot login before he has confirmed his account. But when he uses the password reset function he gets logged in even if he has not confirmed the registration.
This is because the requires_confirmation function is only used in the LoginForm.
Should this be part of the ResetPasswordForm?