Change Crowd Password Reset Token Expiry Period from 24 hours

[Glenn Mason]

We are using the Crowd password reset process to send out emails to new users of our application.

Unfortunately users are not activating their accounts within the default 24 hours, resulting in the password reset token is expiring and our support team having to re-issue the reset request.

Is there a way to change the default 24 hours token expiry to a different duration?

Cheers,
Gm

[Joseph Walton · Accepted solution]

The lifetime is configured in Crowd's crowd-ehcache file, located in crowd-webapp/WEB-INF/classes/crowd-ehcache.xml. Increase the times in seconds for ResetPasswordToken from the current value.