Reset password using username instead of email

[janernestgo]

In order to secure the login access, I am planning to remove email address as part of the input field when resetting password. Since active/current users have email, what I intend to do is that when a user reset/forgets his/her password, username will be required (in lieu of email). App will call on the backend the username’s (user) registered email but this will not be displayed.

How should I best write the expression in email to reset?

[johnny]

I guess you could do a search for the user by username and use the email associated to the username

[janernestgo]

The expression does not work w/out the email. Should I do each item’s email?

[johnny]

First item’s email

[janernestgo]

It’s not sending to the input username’s email. I think it is not able to determine the current user based from the input username.

[johnny]

You need to check your privacy rules then

[janernestgo]

Though this function, I intend while the user is not yet login. So instead of entering email as a way to reset the password, I am looking at the username to call on the backend the email. So technically, the user is not logged in.