Project

General

Profile

Actions

feature request #6161

closed

PhycoBank - task #8515: Remaining registation UI tasks

Service and webservice to recover forgotten passwords

Added by Andreas Kohlbecker over 7 years ago. Updated about 2 years ago.

Status:
Closed
Priority:
Highest
Category:
cdmlib
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Severity:
normal

Description

The password recovery function allows users to request for a password recovery link which is send to the user via email.

General security recommendations by OWASP : https://cheatsheetseries.owasp.org/cheatsheets/Forgot_Password_Cheat_Sheet.html

Below are two options for implementing this:


Related issues

Related to EDIT - feature request #7275: [DISCUSS] Require email address for UsersIn ProgressAndreas Müller

Actions
Related to EDIT - feature request #9859: Password Recovery UI ClosedAndreas Kohlbecker

Actions
Related to EDIT - feature request #9497: User self registration serviceClosedAndreas Kohlbecker

Actions
Precedes EDIT - feature request #6162: Implement "Forgot your password?" button in the Taxeditor connect dialog NewKatja Luther

Actions
Actions #1

Updated by Andreas Kohlbecker over 7 years ago

  • Tracker changed from bug to feature request
Actions #2

Updated by Andreas Kohlbecker over 7 years ago

  • Precedes feature request #6162: Implement "Forgot your password?" button in the Taxeditor connect dialog added
Actions #3

Updated by Andreas Kohlbecker over 7 years ago

  • Parent task set to #6169
Actions #4

Updated by Andreas Kohlbecker over 7 years ago

  • Subject changed from Function to recover forgotten passwords to Service and webservice to recover forgotten passwords
Actions #5

Updated by Andreas Kohlbecker about 6 years ago

Actions #6

Updated by Andreas Kohlbecker about 5 years ago

  • Target version changed from Unassigned CDM tickets to Release 5.6
Actions #7

Updated by Andreas Kohlbecker about 5 years ago

  • Priority changed from New to Priority13
  • Target version changed from Release 5.6 to Reviewed Next Major Release
Actions #8

Updated by Andreas Kohlbecker over 4 years ago

  • Parent task changed from #6169 to #8515
Actions #9

Updated by Andreas Müller over 2 years ago

  • Target version changed from Reviewed Next Major Release to Release 5.45

I move this to next milestone as it is what you are currently work on as far as I know.

Actions #10

Updated by Andreas Kohlbecker over 2 years ago

  • Description updated (diff)
Actions #11

Updated by Andreas Kohlbecker over 2 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 50
Actions #12

Updated by Andreas Kohlbecker over 2 years ago

  • Tags changed from security to security, phycobank, phycobank-ready-for-submitters
  • Priority changed from Priority13 to Highest
Actions #13

Updated by Andreas Kohlbecker over 2 years ago

Actions #14

Updated by Andreas Müller over 2 years ago

I added the new service to httpInvoker and CdmApplicationRemoteConfiguration

Actions #15

Updated by Andreas Kohlbecker over 2 years ago

  • Status changed from Resolved to Feedback
  • Assignee changed from Andreas Kohlbecker to Andreas Müller

Andreas Müller wrote:

I added the new service to httpInvoker and CdmApplicationRemoteConfiguration

I am not sure if these service methods are suitable for httpInvoker as they are asynchronously and return Futures. This needs to be checked.

Actions #16

Updated by Andreas Müller over 2 years ago

Andreas Kohlbecker wrote:

Andreas Müller wrote:

I added the new service to httpInvoker and CdmApplicationRemoteConfiguration

I am not sure if these service methods are suitable for httpInvoker as they are asynchronously and return Futures. This needs to be checked.

This may be true. However, each CdmRemotingApplicationController requires this service. Alternatively we could implement in another way (e.g. by throwing an exception when being used).

Actions #17

Updated by Andreas Müller over 2 years ago

  • Status changed from Feedback to Resolved
  • Assignee changed from Andreas Müller to Andreas Kohlbecker

... or we implement it similar to the ProgressMonitoring services which also handle asynchronous task but differently.

However, this is not my task. I only wanted to fix the compile error in TaxEditor code. If you think this needs to be done differently feel free to do so.

Actions #18

Updated by Andreas Kohlbecker over 2 years ago

Actions #19

Updated by Andreas Kohlbecker over 2 years ago

  • Status changed from Resolved to Closed
  • % Done changed from 50 to 100

I think we can keep it as it is.

Actions #20

Updated by Andreas Müller about 2 years ago

  • Target version changed from Release 5.45 to Release 5.29
Actions

Also available in: Atom PDF