You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ofbiz.apache.org by "Jacques Le Roux (JIRA)" <ji...@apache.org> on 2016/05/09 19:11:12 UTC

[jira] [Closed] (OFBIZ-7058) New password set in forgot password workflow not works sometimes and gives error

     [ https://issues.apache.org/jira/browse/OFBIZ-7058?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux closed OFBIZ-7058.
----------------------------------
       Resolution: Fixed
    Fix Version/s: 13.07.04
                   15.12.01
                   14.12.01

Thanks Amardeep for the detailled explanation and the patch. The second solution seems to fit better indeed. Fixed in 
trunk r1743025 + 1743027
R15.12 r1743028 + 1743029
R14.12 r1743030 + 1743031
R13.07 r1743032 + 1743033

> New password set in forgot password workflow not works sometimes and gives error
> --------------------------------------------------------------------------------
>
>                 Key: OFBIZ-7058
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-7058
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ALL COMPONENTS
>    Affects Versions: Trunk
>            Reporter: Amardeep Singh Jhajj
>            Assignee: Jacques Le Roux
>            Priority: Critical
>             Fix For: 14.12.01, 15.12.01, 13.07.04
>
>         Attachments: OFBIZ-7058-screenshot-1.png, OFBIZ-7058-screenshot-2.png, OFBIZ-7058.patch
>
>
> Sometimes, on clicking the reset password link from "New password sent" email we get a reset password page and on saving the new password we get following error. 
> {code}
> [java] org.apache.shiro.crypto.CryptoException: Unable to execute 'doFinal' with cipher instance [javax.crypto.Cipher@3ea85a47].
>      [java] 	at org.apache.shiro.crypto.JcaCipherService.crypt(JcaCipherService.java:462) ~[shiro-core-1.2.3.jar:1.2.3]
>      [java] 	at org.apache.shiro.crypto.JcaCipherService.crypt(JcaCipherService.java:445) ~[shiro-core-1.2.3.jar:1.2.3]
>      [java] 	at org.apache.shiro.crypto.JcaCipherService.decrypt(JcaCipherService.java:390) ~[shiro-core-1.2.3.jar:1.2.3]
>      [java] 	at org.apache.shiro.crypto.JcaCipherService.decrypt(JcaCipherService.java:382) ~[shiro-core-1.2.3.jar:1.2.3]
>      [java] 	at org.ofbiz.entity.util.EntityCrypto$ShiroStorageHandler.decryptValue(EntityCrypto.java:282) ~[ofbiz-entity.jar:?]
>      [java] 	at org.ofbiz.entity.util.EntityCrypto.doDecrypt(EntityCrypto.java:147) ~[ofbiz-entity.jar:?]
>      [java] 	at org.ofbiz.entity.util.EntityCrypto.decrypt(EntityCrypto.java:126) ~[ofbiz-entity.jar:?]
>      [java] 	at org.ofbiz.webapp.control.LoginWorker.login(LoginWorker.java:389) ~[ofbiz-webapp.jar:?]
>      [java] 	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_60]
>      [java] 	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_60]
>      [java] 	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_60]
>      [java] 	at java.lang.reflect.Method.invoke(Method.java:497) ~[?:1.8.0_60]
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)