gitarena
gitarena copied to clipboard
Implement password reset self service
This is totally possible if SMTP is enabled and configured but the question is how we would accomplish this when SMTP is disabled
Similarly to how Discord and Steam handle 2FA, would it make sense to similarly have a 'backup' code generated and shown upon registration that can be used in order to reset a password, which is shown once and could be regenerated upon usage?
That sounds reasonably.