mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-09-06 10:28:26 -04:00
When the user request a reset password link, the user.state is set to request_password_reset.
Which means the user will only be able to reset their password, and not sign-in. Once the user resets the password the user state is set to active once more. If the link is used a second time they will be redirected to the index page with a message that the link in the email is not longer valid.
This commit is contained in:
@@ -40,4 +40,4 @@ def test_sign_out_user(notifications_admin,
|
||||
response = client.get(url_for('main.sign_out'))
|
||||
assert response.status_code == 302
|
||||
assert response.location == url_for(
|
||||
'main.sign_in', _external=True)
|
||||
'main.index', _external=True)
|
||||
|
||||
Reference in New Issue
Block a user