4 issues against password reset flow. Here's what I found.

Password reset looks like a 20-line feature. Until it has an email leak, a half-finished transaction,...