Hello,
I sent a password change ticket to a user and blocked this user before they used the ticket. However, the ticket is still valid and user can change their password.
While the user will be prevented from logging in afterward, permitting them to perform any actions — especially sensitive operations such as changing their password — after being blocked is undesirable.
Are there any ways to invalidate password change ticket after user was blocked?