Reduce default reset token validity to 1 hour

[plack-middleware-auth-complex.git] / lib / Plack / Middleware / Auth / Complex.pm

diff --git a/lib/Plack/Middleware/Auth/Complex.pm b/lib/Plack/Middleware/Auth/Complex.pm
index f69bbe6aa6e1b91ba570d9bc37da6836304d7fdb..e272f18b431e57099cd5934550113c812d07579a 100644 (file)
--- a/lib/Plack/Middleware/Auth/Complex.pm
+++ b/lib/Plack/Middleware/Auth/Complex.pm
@@ -29,7 +29,7 @@ sub default_opts {(
        realm             => 'restricted area',
        cache_fail        => 0,
        cache_max_age     => 5 * 60,
-       token_max_age     => 60 * 60 * 24,
+       token_max_age     => 60 * 60,
        username_regex    => qr/^\w{2,20}$/a,
        register_url      => '/action/register',
        passwd_url        => '/action/passwd',
@@ -131,7 +131,7 @@ sub send_reset_email {
                header => [
                        From    => $self->{mail_from},
                        To      => $user->{email},
-                       Subject => $user->{mail_subject},
+                       Subject => $self->{mail_subject},
                ],
                body => $self->mail_body($username, $token),
        ));
@@ -379,7 +379,7 @@ to 5 minutes.
 
 =item token_max_age
 
-Password reset token validity, in seconds. Defaults to 24 hours.
+Password reset token validity, in seconds. Defaults to 1 hour.
 
 =item username_regex