Project

General

Profile

Actions

Feature proposal #5680

open

Improve forgot login

Added by krileon over 8 years ago. Updated 5 months ago.

Status:
Assigned
Priority:
Urgent
Assignee:
Target version:
Start date:
21 December 2015
Due date:
% Done:

0%

Estimated time:

Description

Separate forgot login into forgot password and forgot username pages respectively. No longer require username for forgot password. In the case of generated passwords it would just email them their new password, but in the case of user supplied DO NOT DO THIS (bad security to send plaintext passwords in email!) instead send a URL that when used gives them a page to supply their new password.

Actions #1

Updated by krileon over 8 years ago

  • Target version changed from CB 2.0.13 to CB 2.1
Actions #2

Updated by krileon almost 8 years ago

  • Priority changed from Normal to Urgent
  • Target version changed from CB 2.1 to CB 2.0.14

This should function like Joomla using the reset token. We also should support the force password reset parameter and test for it on login attempt.

Actions #3

Updated by beat almost 8 years ago

Of course agree for not reseting password before sending first mail.

But I am not hot of having 2 separate pages for username and password forgotten. That means 2 links in the login module, and thus on all pages of the site. Not great UX-wise imho.

Actions #4

Updated by beat almost 8 years ago

  • Target version changed from CB 2.0.14 to CB 2.0.15
Actions #5

Updated by beat over 7 years ago

  • Target version changed from CB 2.0.15 to CB 2.1
Actions #6

Updated by krileon over 7 years ago

  • Target version changed from CB 2.1 to CB 2.2
Actions #7

Updated by krileon almost 6 years ago

  • Target version changed from CB 2.2 to CB 2.8
Actions #8

Updated by beat about 1 year ago

  • Target version changed from CB 2.8 to CB 2.8.1
Actions #9

Updated by beat 8 months ago

  • Target version changed from CB 2.8.1 to CB 2.8.2
Actions #10

Updated by beat 7 months ago

  • Target version changed from CB 2.8.2 to CB 2.9.0
Actions #11

Updated by beat 5 months ago

  • Target version changed from CB 2.9.0 to CB 2.9.2
Actions

Also available in: Atom PDF