[jira] Closed: (OFBIZ-3842) Security Update for forgotten passwords

["Jacques Le Roux (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/OFBIZ-3842?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux closed OFBIZ-3842.
----------------------------------

    Resolution: Fixed

Thanks Sascha, and Bilgin,

Sascha, your patch is in trunk at r1038209  


> Security Update for forgotten passwords
> ---------------------------------------
>
>                 Key: OFBIZ-3842
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3842
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: ALL COMPONENTS
>    Affects Versions: SVN trunk
>            Reporter: Sascha Rodekamp
>            Assignee: Erwan de FERRIERES
>             Fix For: SVN trunk
>
>         Attachments: OFBIZ-3842_security.patch, OFBIZ-3842_security.patch, OFBIZ-3842_security.patch
>
>
> Hi everybody,
> here is a patch that generated a radom Password when the "require new password" function is called. In the current Trunk it's a kind of hard coded password that will be send to the user. After generating a new pass the "requireNewPassword" flag will be set to true (configurable).
> Have a good day
> Sascha

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.