How long is recovery token valid? Can I change it?

[tomofumi0003]

It has a question and a feature request.

• Question
  How long is the expiration time of account creation and account recovery link?

• Feature request
  Please add the expiration time to account creation and account recovery mail.

[remy]

• The token expiry is set to 3 days. You can redefine it using the Auth.tokenExpiracy setting. (see app/Config/default.php for example, you can override by redefining it in your very own app/Config/app.php)
• As a user trying to register or recover my account I should be told when the token will expire

Thanks for your feedback!