[Django] #26012: Reset Password If Email doesn't exist

[Django]

#26012: Reset Password If Email doesn't exist
------------------------------+----------------------------
Reporter: nauman3128 | Owner: nobody
Type: Bug | Status: new
Component: contrib.auth | Version: 1.8
Severity: Normal | Keywords: password reset
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
------------------------------+----------------------------
Currently if we use django builtin password reset functionality, it didn't
handles the case to notify the user that entered email is not registered
or some error message. I think system must notify the user for that
otherwise user waits for the email to receive.

--
Ticket URL: <https://code.djangoproject.com/ticket/26012>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

[Django]

#26012: Reset Password If Email doesn't exist

--------------------------------+--------------------------------------

Reporter: nauman3128 | Owner: nobody
Type: Bug | Status: new
Component: contrib.auth | Version: 1.8

Severity: Normal | Resolution:

Keywords: password reset | Triage Stage: Unreviewed

Has patch: 0 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0

Easy pickings: 0 | UI/UX: 0

--------------------------------+--------------------------------------
Changes (by nauman3128):

* cc: nauman3128 (added)
* needs_better_patch: => 0
* needs_tests: => 0
* needs_docs: => 0

--
Ticket URL: <https://code.djangoproject.com/ticket/26012#comment:1>

[Django]

#26012: Provide an error message during password reset if email doesn't exist
--------------------------------+--------------------------------------
Reporter: nauman3128 | Owner: nobody
Type: Bug | Status: closed
Component: contrib.auth | Version: 1.8
Severity: Normal | Resolution: invalid

Keywords: password reset | Triage Stage: Unreviewed

Has patch: 0 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0

Easy pickings: 0 | UI/UX: 0

--------------------------------+--------------------------------------
Changes (by timgraham):

* status: new => closed
* resolution: => invalid

Comment:

As noted
[https://docs.djangoproject.com/en/dev/topics/auth/default/#django.contrib.auth.views.password_reset
in the documentation]:

If the email address provided does not exist in the system, this view
won’t send an email, but the user won’t receive any error message either.
This prevents information leaking to potential attackers. If you want to
provide an error message in this case, you can subclass
`PasswordResetForm` and use the `password_reset_form` argument.

--
Ticket URL: <https://code.djangoproject.com/ticket/26012#comment:2>