search

decred / politeia

ISC License
110 stars 75 forks source link

politeiawww: Password change bug. #1466

Open degeri opened 3 years ago

degeri commented 3 years ago

There is no check to ensure that the the "current password" and the "new password" are different when changing passwords. Ideally for a clean UX, the user should not be allowed to change the password to itself.

We can do this on the client side too. Not really an major issue.

lukebp commented 3 years ago

We'll address this in the upcoming user layer rewrite that is part of the Pi 2021 Q3 proposal. Marking this as blocked for now.