Changing email address in user profile kills login

ISN-Zurich / PersonalDossiers

A repository about the Personal Dossiers Project in ISN. It is about the development of a "collecting mechanism" of dossiers-items already hosted in ISN's digital library and transformation of this collection into user-defined educational modules.

0 stars 0 forks source link

Changing email address in user profile kills login #144

Closed othbert closed 10 years ago

othbert commented 10 years ago

Password hash doesn't change in the db, isn't it supposed to be a hash of the username and password together? So I guess fault is in the js sending the new email to the service, not hex_sha1'ing the mail+pass on mail change...

othbert commented 10 years ago

We should disable the email field from being editable...

There's no plaintext password field, meaning we would be unable to create a new hash to be stored in the database. Also, we should probably remove the change password functionality as it currently shows just the hash.

othbert commented 10 years ago

will be covered in #146