[stable13] Change password expiration time from 12h to 7d

[MorrisJobke]

We use the same logic for creating accounts without a password and there the 12h is a bit short. Users don't expect that the signup link needs to be clicked within 12h - 7d should be a more expected behavior.

Backport of #10942

[Knot3n]

i know that its already "approved" but 7 days is a long time for a signup link.

24h to 48h would fit more into it. After that it should be possible to request a new link.
If the comment here does not fit in or is obsolete, then I'm sorry.

[MorrisJobke]

i know that its already "approved" but 7 days is a long time for a signup link.

24h to 48h would fit more into it. After that it should be possible to request a new link.
If the comment here does not fit in or is obsolete, then I'm sorry.

We get many complains also from businesses where admins send this out and after the weekend the link is invalid. It's also a personalized and quite long token. We are thinking about adding some easy to use reset password links additionally there.

Anyways - thanks for the feedback.