Details
-
Story
-
Status: Closed (View Workflow)
-
TBD
-
Resolution: Done
-
None
-
None
-
-
Core: F - Sprint 90
-
5
-
Prokopovych
Description
Display a "send reset password email" link for any record containing a non-empty username value.
At present, there is a lot of logic surrounding what message to display here ("create credentials" vs "reset credentials") but this logic relies on an insecure endpoint that will soon be removed (MODLOGIN-128). Since we send the same "reset your password" message regardless of the text of the link on the user-edit page, there's no reason for all that effort; when a username is present, display a "send reset password email" link, end of story.
TestRail: Results
Attachments
Issue Links
- blocks
-
MODLOGIN-128 It is possible to fetch password hashes for all users
-
- Closed
-
- relates to
-
MODLOGIN-129 POST to /authn/credentials accepts empty string for password
-
- Closed
-