Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- users update/create API accepts a new parameter called `token_login` that enables or disables the feature for a user - when this feature is enabled, the user can only login by accessing a link that is sent to them by SMS. This link will log them in automatically without the need of entering other credentials. Regular login is not possible because nobody knows the user's actual password. - generated tokens are valid for 24 hours - tokens can be regenerated - in this case the old token becomes invalid. #6380
- Loading branch information