1. Brian Lewis Avatar Brian Lewis
  2. Untitled project
  3. pineapples
  4. Issues

Login works with wrong password

Issue #548 resolved
Ghislain Hachey created an issue

With external email users it does not matter what password is entered the system will login successfully.

Comments (11)

  1. Ghislain Hachey reporter

    Related to this issue is the change password feature sort of almost working but clunky. See it returns a failed message as shown below.

    Screen Shot 2019-03-21 at 11.10.11 AM.png

    Yet it sends a email message saying it was changed.

    Screen Shot 2019-03-21 at 11.10.03 AM.png

    Things to consider:

    • Bring in the password validator like in neat ConfirmInvite and ResetPassword components.
    • Test to make sure the process works correctly
    • The password should only changed for the logged in user
    • The email message should only be sent if password changed
    • The user should be provided a link to return "home" on success
  12. Log in to comment
Assignee
Type
bug
Priority
major
Status
resolved
Votes
0
Watchers
2
Jira: the preferred issue tracker for Bitbucket. Join the team!