disable sending email or show presence when forgot system user password

This commit is contained in:
Erick Guan
2014-12-10 14:17:49 +08:00
parent 953ac7de8f
commit 9937af7ac4
2 changed files with 16 additions and 3 deletions

View File

@ -120,14 +120,15 @@ class SessionController < ApplicationController
RateLimiter.new(nil, "forgot-password-min-#{request.remote_ip}", 3, 1.minute).performed!
user = User.find_by_username_or_email(params[:login])
if user.present?
user_presence = user.present? && user.id != -1
if user_presence
email_token = user.email_tokens.create(email: user.email)
Jobs.enqueue(:user_email, type: :forgot_password, user_id: user.id, email_token: email_token.token)
end
json = { result: "ok" }
unless SiteSetting.forgot_password_strict
json[:user_found] = user.present?
json[:user_found] = user_presence
end
render json: json