Impartial response

8961f60effc7-impartial-response.ex

def create(conn, %{"user" => %{"email" => email}}) do
 if user = Accounts.get_user_by_email(email) do
   Accounts.deliver_user_reset_password_instructions(
     user,
     &Routes.user_reset_password_url(conn, :edit, &1)
   )
 end
 
 # In order to prevent user enumeration attacks, regardless of the outcome, show an impartial success/error message.
 conn
 |> put_flash(
   :info,
   "If your email is in our system, you will receive instructions to reset your password shortly."
 )
 |> redirect(to: "/")
end