Email Address Validation for Forgot Password
How To articles are not official guidelines or officially
supporteddocumentation. They are community-contributed content and may
not alwaysreflect the latest updates to Liferay DXP. We welcome your
feedback toimprove How to articles!
While we make every effort to ensure this Knowledge Base is accurate,
itmay not always reflect the most recent updates or official
guidelines.We appreciate your understanding and encourage you to reach
out with anyfeedback or concerns.
Legacy Article
You are viewing an article from our legacy
"FastTrack"publication program, made available for
informational purposes. Articlesin this program were published without a
requirement for independentediting or verification and are provided
"as is" withoutguarantee.
Before using any information from this article, independently verify
itssuitability for your situation and project.
Issue
- The Forgot Password option does not validate if the user enters a correct email address. You can enter anything and the field will accept it.
- Two types of validation are expected:
- Email format validation (to ensure the entered email address follows a valid format).
- Existing email validation (to verify that the entered email address is registered in the system).
Resolution
-
Email format validation is not included in the Forgot Password functionality out-of-the-box. However, it is possible to customize this process and create an email address validator service. For guidance on how to achieve this, refer to this forum thread: Customize the email validation. Please note that Liferay Support does not provide assistance for implementing customization and you may seek help from our Global Services team.
-
Existing email validation is intentionally not included in the Forgot Password process by default to prevent enumeration attacks. The property
login.secure.forgot.password controls this behavior and is set to true by default. For more information, see How to prevent user enumeration attacks through the Forgot Password functionality.
Did this article resolve your issue ?
