Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 369398 - Password resetting improvements
Summary: Password resetting improvements
Status: CLOSED WONTFIX
Alias: None
Product: Orion
Classification: ECD
Component: Server (show other bugs)
Version: 0.3   Edit
Hardware: PC Windows 7
: P4 normal (vote)
Target Milestone: ---   Edit
Assignee: Anthony Hunter CLA
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on: 370469
Blocks:
  Show dependency tree
 
Reported: 2012-01-23 10:18 EST by Szymon Brandys CLA
Modified: 2017-01-10 15:38 EST (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Szymon Brandys CLA 2012-01-23 10:18:22 EST
Password resetting works good. I would suggest the following changes though.
1) Allow to provide either the login or the mail to reset the password. Just in case the user forgot both the login and password.
2) Do not display what address we are sending the confirmation link to.
3) The confirmation links should expire in case one requested password reset, but decided to not click the link in the mail.
4) The confirmation page should look similar to other pages on the server e.g. login page. I think it should at least have a header + the same bg and fg colors.

Feel free to open separate bugs for each item.
Comment 1 Malgorzata Janczarska CLA 2012-02-10 05:27:44 EST
Parts of this is done, this is what we should still do:
>3) The confirmation links should expire in case one requested password reset, but decided to not click the link in the mail.
>4) The confirmation page should look similar to other pages on the server e.g. login page. I think it should at least have a header + the same bg and fg colors.
I think they may wait to 0.5.
Comment 2 Malgorzata Janczarska CLA 2012-06-06 09:52:47 EDT
(In reply to comment #1)
> I think they may wait to 0.5.

I didn't have time for those improvements in 0.5. Postponing to 1.0
Comment 3 Malgorzata Janczarska CLA 2012-10-10 06:09:55 EDT
(In reply to comment #0)
> 3) The confirmation links should expire in case one requested password reset,
> but decided to not click the link in the mail.
This is the only thing that is left to do. No time for that in 1.0
Comment 4 Anton McConville CLA 2015-05-08 10:34:44 EDT
Anthony hinted that this could be related to another bug.
Comment 5 Michael Rennie CLA 2017-01-10 15:38:25 EST
Closing as part of a mass clean up of inactive bugs. Please reopen if this problem still occurs or is relevant to you. For more details see:

https://dev.eclipse.org/mhonarc/lists/orion-dev/msg04002.html