Community
Participate
Working Groups
Password resetting works good. I would suggest the following changes though. 1) Allow to provide either the login or the mail to reset the password. Just in case the user forgot both the login and password. 2) Do not display what address we are sending the confirmation link to. 3) The confirmation links should expire in case one requested password reset, but decided to not click the link in the mail. 4) The confirmation page should look similar to other pages on the server e.g. login page. I think it should at least have a header + the same bg and fg colors. Feel free to open separate bugs for each item.
Parts of this is done, this is what we should still do: >3) The confirmation links should expire in case one requested password reset, but decided to not click the link in the mail. >4) The confirmation page should look similar to other pages on the server e.g. login page. I think it should at least have a header + the same bg and fg colors. I think they may wait to 0.5.
(In reply to comment #1) > I think they may wait to 0.5. I didn't have time for those improvements in 0.5. Postponing to 1.0
(In reply to comment #0) > 3) The confirmation links should expire in case one requested password reset, > but decided to not click the link in the mail. This is the only thing that is left to do. No time for that in 1.0
Anthony hinted that this could be related to another bug.
Closing as part of a mass clean up of inactive bugs. Please reopen if this problem still occurs or is relevant to you. For more details see: https://dev.eclipse.org/mhonarc/lists/orion-dev/msg04002.html