I'm trying to implement functionality to allow users to reset their
passwords if they have forgotten them.
My general plan:
Users enters email address, clicks "forgot my password".
I generate a hash, possibly of their old password, and store it.
I send out an email with a link including that hash.
When the user clicks that link, I check the hash, and assign a random
password to the specific account.
Send out a second email with the new password.
Is there anything like this already available?
Zope3-users mailing list