Home > Enterprise >  Django AllAuth resent password even if the password is not in the database
Django AllAuth resent password even if the password is not in the database

Time:04-11

How do I prevent django-allauth from sending password recovery emails to emails not registered in the database?

CodePudding user response:

It is to prevent account enumeration.

ACCOUNT_PREVENT_ENUMERATION = False 

in settings.py should change the behaviour.

  • Related