FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    Forgot Password

    Scheduled Pinned Locked Moved Unsolved
    Q&A
    2
    2
    60
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      johnmiller
      last edited by

      Hi,

      We are using anonymous_client.forgot_password to reset the forgotten passwords. We have noticed that the API never returns 404 (The User could not be found.) status code, even if the provided email address does not exist. It returns 200.

      Could you please have a look?

      Best regards,
      JM

      mark.robustelliM 1 Reply Last reply Reply Quote 0
      • mark.robustelliM
        mark.robustelli @johnmiller
        last edited by

        @johnmiller I'm not 100% sure but that may be by design. You don't want to give away too much information. If it returned a specific error code, then you would know if the user exists or not.

        1 Reply Last reply Reply Quote 0
        • First post
          Last post