Best way to implement 'Forget password?'

Question

I am planning to implement forget password functionality without any frameworks. What would be the best way to do that using the user's email? Any idea?

Answer 1

Normally you should generate a JWT token with a short life span. You can google more on the details on JWT.

If there is no specific reason to do otherwise, it is wise to search Packagist for a ready made JWT authentication component to install.