'Django AllAuth resent password even if the password is not in the database
How do I prevent django-allauth from sending password recovery emails to emails not registered in the database?
Solution 1:[1]
It is to prevent account enumeration.
ACCOUNT_PREVENT_ENUMERATION = False
in settings.py should change the behaviour.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Işık Kaplan |