Implement password source verification before renewing password

apache / airavata-custos

Apache Airavata Custos Security

https://airavata.apache.org/custos

Apache License 2.0

14 stars 27 forks source link

Implement password source verification before renewing password #314

Closed isururanawaka closed 1 year ago

isururanawaka commented 2 years ago

currently, this API only accepts new passwords and usernames. But, we need to create a password renewal policy to avoid unauthorized password changes.

isururanawaka commented 2 years ago

https://github.com/apache/airavata-custos/pull/313/files (this PR checks old passwords. But, we need to implement mail validation in case of old password is forgetten)

isururanawaka commented 1 year ago

completed