Sign in through GitHub

RailsCasts Pro episodes are now free!

Learn more or hide this

Alexey Savartsov's Profile

GitHub User: asavartsov

Comments by Alexey Savartsov

Avatar

Definitely should set password_reset_token to nil after successful password reset to prevent reusing the link, especially for long expiration time.