Implementing a forgot password flow (with pseudo code)

Table of contents: Security Issues to consider: Brute Force Attacks Theft of password reset tokens from the database Reusing existing tokens Stealing tokens through email hijacking How to implement a secure password reset flow Enable users to en...