Password reset link not expired at Stocky App

How it was found

You can use password reset link to reset password multiple times.

Steps:

1. Go to https://stocky.shopifyapps.com/users/forgotten_password and Send the password reset link to your email. (if this page doesn't appear you should add login details via this https://stocky.shopifyapps.com/preferences/users ) {F869115}
2. Go to your email inbox you see reset token like this https://stocky.shopifyapps.com/users/new_password?reset_token=your-reset-tokenand click the link to change password. you can use this link many times to reset password

Impact

Password Reset Link not expiring after changing password