vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add maximum lifetime of 30m on password recovery tokens

Browse source 
Fixes https://jira.coreos.com/browse/QS-80
This commit is contained in:
Joseph Schorr 2017-12-06 17:06:03 -05:00
parent d405f6f158
commit 5dd95038cf
3 changed files with 33 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
config.py
View file

@ -494,3 +494,6 @@ class DefaultConfig(ImmutableConfig):
# Defines a secret for enabling the health-check endpoint's debug information.
ENABLE_HEALTH_DEBUG_SECRET = None
# The lifetime for a user recovery token before it becomes invalid.
USER_RECOVERY_TOKEN_LIFETIME = '30m'