I have a profile page setup where users can view their own data and modify it if necessary.
They get emailed a link to the page with a checksum token, so they do NOT have to login.
The page works fine when the checksum is not expired.
Under Administer > System Settings > Misc you can adjust the lifespan of the token (default is 7 days).
Once the token expires, if the user clicks on the link, they are simply redirected to the home page of the site.
This is terrible user experience as they are not going to know why they can not access their profile anymore.
It would make a lot more sense that they stayed on the profile page they linked to, and then the profile page should generate an error saying something like "Sorry your checksum token has expired. You will need to get a new one to access this page."
This seems like basic functionality that should be included, or maybe I am just missing something?