More consistent behaviour Password reset email

[luckow]

Today, I noticed that the password reset email is not being sent once the recovery email address is processed by the mail server on the Cloudron instance for which I forgot the password.

Mmmmh. I got the idea. But:

1. It is possible to add a user with an email address managed by the Cloudron instance.
2. There is no information that no email is sent as part of the password reset process. (This behaviour is fine, by the way.)
3. You have to check the email logs to determine that no email was sent.
4. You must click on the invitation icon and retrieve the following information in the ‘Send email’ dialogue box: ‘Password reset email cannot be sent to email addresses hosted on the same Cloudron`

One step back.

If I forget my password for the Cloudron instance that hosts my emails and I have access to my email inbox, I can open my email client and view the saved password for the inbox. Ideally, it's the same one I use to log in to the dashboard. Then no password reset workflow is necessary. But to be fair, users need to think about the software logic.

If I've chosen to use an app password for my email client, that password shouldn't work as the login password for the dashboard.

The only case in which the reset email is not sent to an email address hosted on the same Cloudron instance is if the user does not have access to their inbox.

Given the possibility of an app password and the naivety of normal users, this decision by the Cloudron developers is wrong. It's okay to think about it, but in my opinion, the default setting could just be a hint/warning/checkbox... something where I, as an administrator/user, can decide to choose an email address hosted on the same instance.

The other way round, if this workflow works as intended, it shouldn't be possible to create/add a user with an email address hosted on this instaance.