User Admin: Force password reset

cofoundry-cms / cofoundry

Cofoundry is an extensible and flexible .NET Core CMS & application framework focusing on code first development

https://www.cofoundry.org

MIT License

836 stars 146 forks source link

Closed HeyJoel closed 2 years ago

HeyJoel commented 2 years ago

In the admin panel we should be able to force a password reset on a user account, the feature should:

Follow a similar flow to new user creation, whereby a temporary password is assigned which is required to be changed on logon.
Any current sessions for the specified user should be invalidated
The feature should be restricted by a permission.

HeyJoel commented 2 years ago

Fixed, will be released in v0.10:

A users password can be reset using ResetUserPasswordCommand or IAdvancedContentRepository.Users().ResetPasswordAsync(int userId)
Resetting a user password requires the CofoundryUserResetPasswordPermission or NonCofoundryUserResetPasswordPermission depending on the user area, and the current user cannot reset the password on their own account.
If an admin user has the required permissions, they can reset a password via the admin panel