[Koha-bugs] [Bug 31382] Cannot reach password reset page when password expired
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Wed Aug 17 13:12:30 CEST 2022
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31382
--- Comment #1 from Nick Clemens <nick at bywatersolutions.com> ---
Created attachment 139249
-->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=139249&action=edit
Bug 31382: Pass password_has_expired param to templte
This patch restores the param, while still leaving the check against invalid
login credentials to ensure we don't leak information.
To test:
1 - enable EnableExpiredPasswordReset
2 - Edit a patron to set password to expire in the past
3 - Attempt opac login as patron
4 - It fails, but you are redirected to login screen with no info
5 - Apply patch
6 - Attempt login
7 - You are notified password expired and given reset link
8 - Go back to login screen
9 - Login with correct username,, wrong password
10 - You are notified of incorrect credentials, not password expiration
--
You are receiving this mail because:
You are watching all bug changes.
More information about the Koha-bugs
mailing list