Alter token logging in and timeout behaviour.

Restrict email_sign_in token to one day, unused confirmation tokens to
one month. Used tokens will redirect to the created thing but not log
in; don't log in with alert links (unsubscribe link never expires, reply
link will still show "reopen" tickbox).

1 files changed, 3 insertions, 4 deletions

diff --git a/perllib/FixMyStreet/DB/ResultSet/AlertType.pm b/perllib/FixMyStreet/DB/ResultSet/AlertType.pm
index ad180cbd5..0b430008a 100644
--- a/perllib/FixMyStreet/DB/ResultSet/AlertType.pm
+++ b/perllib/FixMyStreet/DB/ResultSet/AlertType.pm
@@ -103,13 +103,12 @@ sub email_alerts ($) {
                     } );
                     $data{alert_email} = $user->email;
                     my $token_obj = FixMyStreet::App->model('DB::Token')->create( {
-                        scope => 'email_sign_in',
+                        scope => 'alert_to_reporter',
                         data  => {
-                            email => $user->email,
-                            r => 'report/' . $row->{id},
+                            id => $row->{id},
                         }
                     } );
-                    $data{problem_url} = $url . "/M/" . $token_obj->token;
+                    $data{problem_url} = $url . "/R/" . $token_obj->token;
                 } else {
                     $data{problem_url} = $url . "/report/" . $row->{id};
                 }