4:01 p.m.
A disabled user receives the following info message, if he tries to reset his password:
You should receive an email shortly with further instructions.
This is a bit confusing. A message like that would be nicer:
Failed to send email, please contact the administrator.
I will create a PR if that is ok with you?
10:45 a.m.
This is intentional. If we provide specific error messages on reset password it can be
used to find out whether or not a username/email is valid. Same applies to login, instead
of saying invalid username it just says invalid username or password.
As an improvement we could extend the message to say if you haven't received a message
within a certain time, then retry or contact an admin/support.
----- Original Message -----
From: "Michael Gerber" <gerbermichi(a)me.com>
To: keycloak-dev(a)lists.jboss.org
Sent: Friday, 9 January, 2015 4:01:49 PM
Subject: [keycloak-dev] A disabled user receives a confusing info message, if he tries
to reset his password
A disabled user receives the following info message, if he tries to reset his
password:
You should receive an email shortly with further instructions.
This is a bit confusing. A message like that would be nicer:
Failed to send email, please contact the administrator.
I will create a PR if that is ok with you?
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
3391
days inactive
3394
days old
1 comments
2 participants
participants (2)
-
Michael Gerber -
Stian Thorgersen