data-govt-nz / ckanext-security

A CKAN extension to hold various security improvements for CKAN
GNU Affero General Public License v3.0
25 stars 31 forks source link

Update/allow password reset disabling #32

Closed markstuart closed 4 years ago

markstuart commented 4 years ago

Adds a config flag to allow disabling the monkey-patch for password reset behaviour. CKAN core has fixed the disclosing of accounts that don't exist when resetting passwords in more recent versions of CKAN, so not all clients of this plugin will need that feature anymore.