amethyst-php / account Goto Github PK

A security tokens table should be added for all the operations that are highly risky.

The token can be generated either sending an email or with the current password.

A token should have only a limited lifetime (configurable by config) and should be used by the user to change some important data, such as the new password (recovery or update), emails etc.

The following endpoints should be added:

• Upload custom avatar of the user logged
• Change the current name of the user logged
• Change the current email of the user logged with a security token
• Change the current password of the user logged with a security token