Merge pull request #18479 from ahmedhamidawan/prevent_user_account_queryable_on_reset

                except Exception as e:

                    log.debug(body)

                    return f"Failed to submit email. Please contact the administrator: {util.unicodify(e)}"

            else:

                return "Failed to produce password reset token. User not found."

        if not reset_user:

            log.warning(f"Failed to produce password reset token. User with email '{email}' not found.")

        return None

    def get_reset_token(self, trans, email):

        reset_user = get_user_by_email(trans.sa_session, email, self.app.model.User)

        payload = payload or {}

        if message := self.user_manager.send_reset_email(trans, payload):

            return self.message_exception(trans, message)

        return {"message": "Reset link has been sent to your email."}

        return {"message": "If an account exists for this email address a confirmation email will be dispatched."}

    def __get_redirect_url(self, redirect):

        if not redirect or redirect == "None":

        self.user_manager.delete(user)

        assert user.deleted is True

        message = self.user_manager.send_reset_email(self.trans, {"email": user_email})

        assert message == "Failed to produce password reset token. User not found."

        assert message is None

    def test_get_user_by_identity(self):

        # return None if username/email not found