Account.forgotPassword and avoiding 403 error

help
1

Hi,

Is there a way/setting to prevent Account.forgotPassword from returning a 403 error when the user is not found?

image

I would like to have the same response as when the user is found:

image

Thanks.

2

ryan-reynold-but-why-meme-2096502151
ryan-reynold-but-why-meme-2096502151940×450 56.1 KB

3

Because I don’t want anyone to know whether an email address is valid or not.

4

You can overwrite the existing methods by doing this:

Meteor.startup(() => {
  console.log(
    "Server startup, overriding forgotPassword method for harry73.",
  );
  Meteor.server.method_handlers["forgotPassword"] = async options => {
    console.log("Custom forgotPassword called with options:", options);
    return { success: true };
  };
});
5

Yes @minhna , if there is no possible configuration, I will follow this path.

Thanks.

1 Like
6

You can creat that posible configuration. There’s no existing one currently.