Skip to content

Changes to Garbage Collection & more info on TooManyPasswordRequestsException

Compare
Choose a tag to compare
@weaverryan weaverryan released this 17 Apr 15:38
6aaceb2

Hi friends!

This release comes with two important changes:

  • The garbage collection process (i.e. deleting old, expired password reset request records) previously would delete all old records. Now it only deletes expired records older than 1 week. This helps people to get a better "Your link is expired" text if they click a reset link multiple times - #103 thanks to @kbond.

  • If a user has requested a password reset too many times and has been "throttled", a TooManyPasswordRequestsException is thrown. That class now has 2 new methods that you can use to get more information:

    • getAvailableAt(): \DateTimeInterface
    • getRetryAfter(): int

Have fun!