-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ask old password during password change #1023
Milestone
Comments
This change requires extensive modifications and thorough testing. It involves:
These changes will significantly affect the codebase and require comprehensive testing to ensure system stability and security. For more details, refer to Issue #1023. Instances of |
This was referenced Jan 20, 2025
This was referenced Jan 27, 2025
This might be superseded by #1075 |
Subseded by #1075 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The current UI allows users to change their password without requiring re-entry of the old password.
Requiring additional authentication during password would enhance system security.
Proposed Solution
Update the password change workflow to require the current password before allowing a new password to be set.
Specifically:
Modify the UI to include a field for the old password.
Update the API to validate the old password as part of the password change request.
The text was updated successfully, but these errors were encountered: