Creating Secure Password Resets With JSON Web Tokens
When a user of your application has forgotten their password, it can and should be reset securely. To accomplish a secure password reset, I will demonstrate how to use JSON Web Tokens (JWT) to generate a URL-safe token. The JWT contains encoded information about the user and a signature that, when decoded, is validated to ensure that the token has not been tampered with. Once the JWT is validated, your application can securely allow the user to generate a new password, instead of sending them their forgotten one.
Articles on Smashing Magazine — For Web Designers And Developers
