Security Enhancement: clear all user requests after usage

Hi friends!

This release contains one change to harden security:

• ensure all requests are removed for user - #105 thanks to @kbond

While not normally possible (unless you change the throttle timeout), if a user does have multiple, active "password reset requests" in storage, after using one of them to change their password, all "password reset requests" for that user should be removed. This is safer than allowing other password reset requests to remain active.

Cheers!

Changes to Garbage Collection & more info on TooManyPasswordRequestsException

Hi friends!

This release comes with two important changes:

• The garbage collection process (i.e. deleting old, expired password reset request records) previously would delete all old records. Now it only deletes expired records older than 1 week. This helps people to get a better "Your link is expired" text if they click a reset link multiple times - #103 thanks to @kbond.

• If a user has requested a password reset too many times and has been "throttled", a TooManyPasswordRequestsException is thrown. That class now has 2 new methods that you can use to get more information:

  • getAvailableAt(): \DateTimeInterface
  • getRetryAfter(): int

Have fun!

Initial Stable Release

Hi friends!

I'm VERY happy and proud to release the first stable version of this bundle. A HUGE thanks to
@jrushlow who worked tirelessly on the details of this bundle to not only get it working, but make
sure it's secure and high quality. Also thanks to @romaricdrigon for bootstrapping this effort and to @bocharsky-bw for reviewing repeatedly.

This bundle works best along with MakerBundle and its new make:reset-password command.

Have fun - and if you find any problems, please open an issue.

Cheers!

Bug fix for "fake" repository

Hi!

Still nothing to see here ;). This release contains one bug fix as we finalize the bundle:

• Fixed incorrect fake repository namespace in service definition see #79

Cheers!

Initial Beta Release

Hi friends!

Nothing to see here yet. We're releasing a beta of the bundle so it can be tested properly with its MakerBundle integration.

Cheers!