Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #14812 Users signing in via an OIDC provider should be able to create an account without setting a password
    Actions
    Infos
    #14812
    Thomas Gerbet (tgerbet)
    2020-04-27 17:20
    2020-04-22 10:17
    16080
    Details
    Users signing in via an OIDC provider should be able to create an account without setting a password
    This as a few side effects:
    * accounts without a password cannot use the lost password procedure
    * accounts without a password cannot set one which mean that only SVN token/access keys can be used when a user's password is needed
    Authentication & LDAP
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-04-27
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #14681 Tuleap Releases 11.14 Delivered 2020-03-05 19:57 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #14812

    Git commit

    tuleap/tuleap/stable

    A user without a password cannot set one herself d17c7fabdf
    User avatar Thomas Gerbet (tgerbet) , 2020-04-23 11:52
    User registration is broken a08e321974
    User avatar Thomas Gerbet (tgerbet) , 2020-04-23 17:52
    Prevent unlinking an OIDC provider when the user can lock out itself a274ef8e49
    User avatar Thomas Gerbet (tgerbet) , 2020-04-23 21:20
    No password is asked when a user register after signing in with an OIDC provider c2bfda84e5
    User avatar Thomas Gerbet (tgerbet) , 2020-04-23 18:35
    Can link to an existing user account by signing in to another OIDC provider 3d97e76682
    User avatar Thomas Gerbet (tgerbet) , 2020-04-24 16:20
    Cannot generate a SVN token 0096d846a5
    User avatar Thomas Gerbet (tgerbet) , 2020-04-24 16:33
    Cannot login against a LDAP server that does not allow anonymous binds 2f19f307b6
    User avatar Thomas Gerbet (tgerbet) , 2020-04-24 16:30
    Display settings

    Follow-ups