The form at /auth/forgotten_password should validate the email address format. Currently you could put "afd3wrfes" as your email address and Allura will blindly go ahead and say "If the given email address is on record, a password reset email has been sent to the account's primary email address." even though obviously the email isn't even possible to be valid.
I want to fix it.
Great! You can create a fork of Allura repository and then create a merge request when you done. Feel free to post any questions here.
I have edited 2 files for this feature to be added. Please help me how to create a merge request.
Last edit: Pranav Sharma 2015-04-09
git push
your changes to your forkMerge Request Link -
https://forge-allura.apache.org/p/allura/git/merge-requests/22/
Last edit: Pranav Sharma 2015-04-11
Thanks Pranav! Great to see a new contribution like this. I've posted my feedback about the code changes on the merge request page.
I've merged the merge-requests. Thanks for the contribution, Pranav!