search

data-govt-nz / ckanext-security

A CKAN extension to hold various security improvements for CKAN
GNU Affero General Public License v3.0
25 stars 31 forks source link

Fix/password reset token regression #33

Closed markstuart closed 4 years ago

markstuart commented 4 years ago

Version 2.3.0 introduced an issue where if you used the config option to remove the password reset override (fixed in later versions of CKAN, see #32 ) then the password reset token length regressed to CKAN defaults as well.

This work changes the password reset override to monkeypatch the longer reset token method onto the CKAN core mailer, making it possible to still use the core password reset functionality.