From 8f9182f3083658c1edbe56d4f2dab9eb7c48bcd4 Mon Sep 17 00:00:00 2001
From: LV-426 <lv-426@taproot.org.il>
Date: Tue, 24 Feb 2015 22:07:06 +0200
Subject: rz_server.py: add pw-reset to 'no-login' set

---
 src/server/rz_server.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'src/server')

diff --git a/src/server/rz_server.py b/src/server/rz_server.py
index f1be3b10..b96290bc 100644
--- a/src/server/rz_server.py
+++ b/src/server/rz_server.py
@@ -233,7 +233,7 @@ def init_rest_interface(cfg, flask_webapp):
                   ]
 
     # FIXME: but should be rate limited (everything should be, regardless of login)
-    no_login_paths = ['/login', '/feedback', '/signup']
+    no_login_paths = ['/feedback', '/login', '/pw-reset', '/signup']
 
     for re_entry in rest_entry_set:
         rest_path, f, flask_args = re_entry
-- 
cgit v1.3.1