Remove "active within last two weeks" exception for sign in token requirement Change admin reset password to lock access until the password is reset
		
			
				
	
	
		
			14 lines
		
	
	
	
		
			311 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
			
		
		
	
	
			14 lines
		
	
	
	
		
			311 B
		
	
	
	
		
			Ruby
		
	
	
	
	
	
| # frozen_string_literal: true
 | |
| 
 | |
| module Admin
 | |
|   class ResetsController < BaseController
 | |
|     before_action :set_user
 | |
| 
 | |
|     def create
 | |
|       authorize @user, :reset_password?
 | |
|       @user.reset_password!
 | |
|       log_action :reset_password, @user
 | |
|       redirect_to admin_account_path(@user.account_id)
 | |
|     end
 | |
|   end
 | |
| end
 |