[wp-trac] [WordPress Trac] #46595: Allow more than one valid recovery mode link

WordPress Trac noreply at wordpress.org
Tue Apr 16 05:08:23 UTC 2019

#46595: Allow more than one valid recovery mode link
 Reporter:  flixos90                             |       Owner:
                                                 |  timothyblynjacobs
     Type:  defect (bug)                         |      Status:  closed
 Priority:  normal                               |   Milestone:  5.2
Component:  Bootstrap/Load                       |     Version:  trunk
 Severity:  normal                               |  Resolution:  fixed
 Keywords:  servehappy has-patch has-unit-tests  |     Focuses:
  commit                                         |
Changes (by flixos90):

 * status:  assigned => closed
 * resolution:   => fixed


 In [changeset:"45211" 45211]:
 #!CommitTicketReference repository="" revision="45211"
 Bootstrap/Load: Allow more than one recovery link to be valid at a time.

 While currently a recovery link is only made available via the admin email
 address, this will be expanded in the future. In order to accomplish that,
 the mechanisms to store and validate recovery keys must support multiple
 keys to be valid at the same time.

 This changeset adds that support, adding an additional token parameter
 which is part of a recovery link in addition to the key. A key itself is
 always associated with a token, so the two are only valid in combination.
 These associations are stored in a new `recovery_keys` option, which is
 regularly cleared in a new Cron hook, to prevent potential cluttering from
 unused recovery keys.

 This changeset does not have any user-facing implications otherwise.

 Props pbearne, timothyblynjacobs.
 Fixes #46595. See #46130.

Ticket URL: <https://core.trac.wordpress.org/ticket/46595#comment:24>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list