From 31ae1357404e844a512be02b19c149626549f56a Mon Sep 17 00:00:00 2001
From: Marco <marco1@live.de>
Date: Sat, 20 Aug 2016 22:00:41 +0200
Subject: [PATCH] Add method 'canResetPassword'

---
 src/Auth.php | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)

diff --git a/src/Auth.php b/src/Auth.php
index 69c5ca2..664ae04 100644
--- a/src/Auth.php
+++ b/src/Auth.php
@@ -820,6 +820,35 @@ class Auth {
 		}
 	}
 
+	/**
+	 * Check if the supplied selector/token pair can be used to reset a password
+	 *
+	 * The selector/token pair must have been generated previously by calling `Auth#forgotPassword(...)`
+	 *
+	 * @param string $selector the selector from the selector/token pair
+	 * @param string $token the token from the selector/token pair
+	 * @return bool whether the password can be reset using the supplied information
+	 * @throws AuthError if an internal problem occurred (do *not* catch)
+	 */
+	public function canResetPassword($selector, $token) {
+		try {
+			// pass an invalid password intentionally to force an expected error
+			$this->resetPassword($selector, $token, null);
+
+			// we should already be in the `catch` block now so this is not expected
+			throw new AuthError();
+		}
+		// if the password is the only thing that's invalid
+		catch (InvalidPasswordException $e) {
+			// the password can be reset
+			return true;
+		}
+		// if some other things failed (as well)
+		catch (AuthException $e) {
+			return false;
+		}
+	}
+
 	/**
 	 * Sets whether the user is currently logged in and updates the session
 	 *