Update login logic for Resource Manager

[c-suh]

components:

• sign in
• forgotten password

[tloubrieu-jpl]

More that half is done

[c-suh]

Forgotten password logic updated to match that of Coldfusion's. One more bug left to tackle for the sign in portion.

[tloubrieu-jpl]

Hi @c-suh, can you add an estimate for this ticket ?

[c-suh]

@tloubrieu-jpl @jordanpadams sorry for the huge delay in this. I've just reached out to the SAs about this and hopefully they'll be able to shed some light on this last part.

[jordanpadams]

@c-suh any word on this?

[c-suh]

@jordanpadams, the SAs had a suggestion but this fell by the wayside due to other tasks. I will get back up to speed with it this week.

[tloubrieu-jpl]

@jordanpadams how critical/urgent is this ticket ?

[tloubrieu-jpl]

The vulnaribility related to the password management have been solved by @c-suh

The reason why the ticket was not closed yet is because Catherine realized special characters are not supported in the password and never had been.

[jordanpadams]

@tloubrieu-jpl @c-suh who uses resource manager? how important is it that we support special characters vs just put on the web page for resource manager when they create a password that it cannot contain special characters?

[c-suh]

@jordanpadams, I think the resource manager is used primarily by @rchenatjpl and a few others from various nodes. (Richard, please correct me if I'm wrong). A message is probably fine, if even necessary, since this existed before but didn't create any problems. It does support a few of the special characters, such as the exclamation mark, and I can do a quick test to see which ones exactly if it'd be helpful for the message.

[rchenatjpl]

This page is lightly, very lightly used by me and even less by anyone else, I guess. The release pages - I use those often, and the nodes sometimes do. For both the resource manager and the release pages, is it even possible to create your own password? In any case, I think a message is fine.

[jordanpadams]

@c-suh let's just say all passwords should contain numbers or letters only and hopefully that is a super easy fix.

[tloubrieu-jpl]

The database connection does not work, @c-suh is waiting for an email answer...

[c-suh]

Ticket has been opened with the SAs

[c-suh]

SAs have fixed the issue. This task should be wrapped up this week.

[jordanpadams]

very exciting!!!

[jordanpadams]

sprint backlog since June 24 :-D

[c-suh]

Couldn't find the "Change password" option to update the message, but Allan helped me locate it, and this is finally done!

Also fixed the link for Feedback.

[tloubrieu-jpl]

Message from @c-suh on slack related to how to test this ticket (for @gxtchen ): It's been a while! OK, the Resource Manager is located at https://pds-gamma.jpl.nasa.gov/catalog_tools/resource_manager/. A few notes (pardon any redundancies): this is accessible only on pds-gamma, i.e. production's is intentionally blocked the database (login information) for this tool is the same as for the other catalog tools, e.g. Release Manager, Catalog Manager, and Subscription Service. This database is shared between the gamma and production machines, so a change on one of those will be reflected on the others. to create an account, use the Subscription Service (gray box on right labeled "New Subscriber") to reset your password, use any of the tools (e.g. Subscription Service) except Resource Manager. For some reason, the reset password email doesn't send for only this tool Let me know if you need anything else!