stable
Clone or download
Read-only
It's only mainly the backend part, the helpers on front end side will come in a dedicated patch. The old page is removed and the related features too (like the change of password when expiration is reached). The old change_pw.php was accessible by anonymous by accident in order to allow change of password after expiration. It's now properly managed with an explicit whitelisting of the 2 allowed URLs. Part of story #14552: User preferences goes Burning Parrot Change-Id: I735f16d0bc861c172857ceb8d4cdd18ec036c0a2
Modified Files
Name | ||||
---|---|---|---|---|
M | plugins/ldap/include/ldapPlugin.php | +0 | −2 | Go to diff View file |
M | plugins/openidconnectclient/include/openidconnectclientPlugin.php | +0 | −9 | Go to diff View file |
M | site-content/en_US/include/include.tab | +0 | −1 | Go to diff View file |
M | site-content/fr_FR/LC_MESSAGES/tuleap-core.po | +25 | −0 | Go to diff View file |
M | site-content/fr_FR/include/include.tab | +0 | −1 | Go to diff View file |
M | src/common/Cryptography/ConcealedString.php | +5 | −0 | Go to diff View file |
M | src/common/Event/Event.class.php | +0 | −8 | Go to diff View file |
M | src/common/Password/PasswordSanityChecker.php | +13 | −3 | Go to diff View file |
M | src/common/Password/PasswordStrategy.class.php | +1 | −7 | Go to diff View file |
M | src/common/User/Account/UpdatePasswordController.php | +128 | −2 | Go to diff View file |
A | src/common/User/Account/UpdatePasswordException.php | +29 | −0 | Go to diff View file |
A | src/common/User/Account/UpdatePasswordSanityCheckerException.php | +46 | −0 | Go to diff View file |
M | src/common/User/Account/templates/security-password.mustache | +4 | −5 | Go to diff View file |
M | src/common/User/PreferencesPresenter.class.php | +0 | −18 | Go to diff View file |
M | src/common/User/UserManager.class.php | +2 | −1 | Go to diff View file |
M | src/common/include/URLVerification.class.php | +6 | −4 | Go to diff View file |
M | src/templates/user/info.mustache | +0 | −10 | Go to diff View file |
D | src/www/account/change_pw.php | +0 | −152 | Go to diff View file |
M | src/www/account/index.php | +0 | −9 | Go to diff View file |
M | tests/lib/Builders/UserTestBuilder.php | +6 | −0 | Go to diff View file |
M | tests/phpunit/common/Cryptography/ConcealedStringTest.php | +14 | −0 | Go to diff View file |
A | tests/phpunit/common/Include/UrlVerification/URLVerificationExpiredPasswordTest.php | +100 | −0 | Go to diff View file |
M | tests/phpunit/common/Include/UrlVerification/URLVerificationTest.php | +0 | −5 | Go to diff View file |
A | tests/phpunit/common/User/Account/UpdatePasswordControllerTest.php | +342 | −0 | Go to diff View file |