Re: [airavata-django-portal] Bugs in username and email validation

["Christie, Marcus Aaron" <ma...@iu.edu>]

Hi Dinuka,

Regarding #1, yes, definitely a bug.  However, you shouldn't use reset password when logging in with CILogon. You would change your password with the institution you use to login with CIlogon.

Regarding #2, yes, we allow users to use the same email address to signup.  Going forward, and especially with Custos, we may want to rethink that or make it per-tenant customizable. Some gateways like Galaxy don't allow multiple accounts with the same email address.

> On Oct 30, 2020, at 10:43 AM, Dinuka Desilva <l....@gmail.com> wrote:
> 
> Hi Everyone,
> 
> I was just playing around the django portal [1] and found the following issues. 
> 
> 1) I created an account using the CI logon and then I tried to change the password. I entered the email address as the username and it actually validates the username not to have stops. I think that validation shouldn't be there if the email is taken as the username. If not, I would like to know what's taken as the username.
> <Screenshot 2020-10-30 at 7.53.36 PM.png>
> 
> One other thing, I think it makes sense to get the email address instead of the username at the forgot password.
> 
> 2) At the same time, I signed up using the manual signup and it allowed me to use the same email address to signup again. Now, I have two accounts with the same email address.
> 
> Regards,
> Dinuka
> 
> [1] https://django.seagrid.org/ <https://django.seagrid.org/>