Module: CommandTower::Services::Auth::PasswordReset::TokenVerification

Included in:

Reset, Validate

Defined in:

app/services/command_tower/services/auth/password_reset/token_verification.rb

Overview

Shared token redemption and email-binding checks for the reset services. A reset token is only honoured for the account it was issued to, and an unusable token is always reported as a plain invalid token so callers cannot tell expired from unknown from already-used.