You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Awesome work and really nice options available through the provider list. Everything works with no problems at all.
One comment, which i see making huge difference, security wise.
The SLACK Webhook provider requires the existence of a slack channel.
As you can understand posting a token for a user reset to a channel is like asking for someone to test which user was it through simple brute force.
A better approach would be through the use of Slack's conversation API (https://api.slack.com/methods/conversations.open) which offers the capability to direct message the password request token to the user.
The text was updated successfully, but these errors were encountered:
Hello.
Unfortunately we do not use Slack and this functionality is not written by me. If you use Slack and can make the PR with changes, it will be cool.
Awesome work and really nice options available through the provider list. Everything works with no problems at all.
One comment, which i see making huge difference, security wise.
The SLACK Webhook provider requires the existence of a slack channel.
As you can understand posting a token for a user reset to a channel is like asking for someone to test which user was it through simple brute force.
A better approach would be through the use of Slack's conversation API (https://api.slack.com/methods/conversations.open) which offers the capability to direct message the password request token to the user.
The text was updated successfully, but these errors were encountered: