Skip to content

[stable22] allow using of disabled password reset mechanism for special cases - #28841

Merged
Pytal merged 1 commit into
stable22from
backport/28794/stable22
Sep 15, 2021
Merged

[stable22] allow using of disabled password reset mechanism for special cases#28841
Pytal merged 1 commit into
stable22from
backport/28794/stable22

Conversation

@backportbot-nextcloud

Copy link
Copy Markdown

backport of #28794

- LostController has three endpoints
- door opener email() still rejects
- resetform(), reachable from mail, checks the token first and may report
that password reset is disabled
- setPassword() got its check removed as it is behind CSFR anyway and still
requires a valid token
- this allows special cases like activating a freshly created guest account
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
@Pytal

Copy link
Copy Markdown
Member

Failing test unrelated

@Pytal
Pytal merged commit 4732aea into stable22Sep 15, 2021
@Pytal
Pytal deleted the backport/28794/stable22 branch September 15, 2021 19:15
@PytalPytal added the 4. to release Ready to be released and/or waiting for tests to finish label Sep 15, 2021
@blizzzblizzz mentioned this pull request Sep 23, 2021
4 tasks
@MichaIngMichaIng modified the milestones: Nextcloud 22.1.2, Nextcloud 22.2.0Sep 24, 2021
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

4. to releaseReady to be released and/or waiting for tests to finishbugfeature: users and groups

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@Pytal@blizzz@MichaIng