search

NHSDigital / DataDictionaryPublication

Apache License 2.0
7 stars 1 forks source link

SMTP Config - Mauro notifications #569

Open NellySSJ opened 1 month ago

NellySSJ commented 1 month ago

Local Mauro SMTP service setup to send notifications to users from Mauro e.g. password reset notification.

Are there any other use cases for SMTP service being setup? If not, how important is this?

NellySSJ commented 4 weeks ago

Peter has said the email service is only used around user accounts - so registering users, password resets and forgotten passwords. I can't see any other use for it in Mauro. As we are looking to setup OpenID, the only account that could be potentially affected would be any local Mauro account. In addition, seeing that SMTP currently sends password as clear text when it is reset (highlgihted by security), I would recommend that SMTP is not implemented for now.