Duplicate of XWIKI-19077 you can use the property security.authentication.resetPasswordTokenLifetime exactly for this.