Skip to main content
I
IPA1-Visitor
1-Visitor
March 8, 2018
Question

Reset Password AppKey-Token Clean-up

  • March 8, 2018
  • 5 replies
  • 3489 views

Hi,

 

my question is concerning the built-in "Reset Password" mechanism that is available through the Form Login page of an Organization. Every time a user resets her password a new application key ("<username>resetToken") is created.

 

Question: Does this application key continue to exist forever on the platform or is there some built-in mechanism (e.g. scheduler) that automatically deletes these resetToken-appkeys?

5 replies

S
supandey5-Regular Member
5-Regular Member
March 15, 2018

Hi @IPA since it expires after a certain period, my understanding is that it gets cleaned up automatically i.e. if it has expired.

 

Is there any specific use case around this topic? Are you observing something odd?

I
IPA1-VisitorAuthor
1-Visitor
March 16, 2018

Hi @supandey, you mean that there is some sort of internal scheduler that checks if the app keys has expired and if yes, it deletes them (and i mean completely delete the app key entity)? I did not see this happening.

 

The use case is that if users start resetting their passwords and the reset tokens are not cleaned up the platform will eventually get full of expired, not needed app keys, which of course require disk space. I do not think this is a good practice..

S
supandey5-Regular Member
5-Regular Member
March 16, 2018

Expired token is deleted, whenever the next time user attempts to reset password for the associated account. So it should not stack up bunch of expired tokens.

Terms & ConditionsAccessibility statement