Reto Inderbitzin

1. It doesn't care about authentication 2. It let's you therefore about every user (providing `orig_email` or `orig_nick`) 3. It updates passwords (even from other users, because 1. and 2.,...

`seneca-user` options ``` js { autopass: false, mustrepeat: true } ``` Requests ``` bash $ curl -H 'Content-Type: application/json' -v http://localhost:3000/auth/login -d '{"email":"[email protected]","password":"pu1"}' * Trying ::1... * Connected to localhost...

`seneca-user` options ``` js { autopass: false, mustrepeat: true } ``` Requests ``` bash curl -H 'Content-Type: application/json' -v http://localhost:3000/auth/create_reset \ > -d '{"email":"[email protected]"}' ... {"ok":true} ``` ``` bash curl...

`seneca-user` options ``` javascript { autopass: true, mustrepeat: false } ``` Requests ``` bash $ curl -H 'Content-Type: application/json' -v http://localhost:3000/auth/create_reset \ > -d '{"email":"[email protected]"}' ... {"ok":true} ``` ``` bash...

``` bash $ curl -H 'Content-Type: application/json' -v \ > -d '{"email":"[email protected]"}' http://localhost:3000/auth/register * Trying ::1... * Connected to localhost (::1) port 3000 (#0) > POST /auth/register HTTP/1.1 > Host:...

``` bash $ curl -H 'Content-Type: application/json' \ > -d '{"password":"p","repeat":"p","nick":"email1","email":"email1"}' -v \ > http://localhost:3000/auth/change_password * Trying ::1... * Connected to localhost (::1) port 3000 (#0) > POST /auth/change_password HTTP/1.1...

The rewrite rules in `.htaccess` for accessing the API discard the existing query string [0]. Parameters like `limit`, `offset`, `order`, `reverse` and `hidebroken` don't work for GET requests, as the...