search

kyngs / LibreLogin

Open-source, multiplatform, and highly customizable authentication plugin with outstanding features and API.
Mozilla Public License 2.0
171 stars 56 forks source link

Password change without old password #179

Open ItsVaidas opened 11 months ago

ItsVaidas commented 11 months ago

For users, that have enabled auto login (are premium players connected to the server) allow to change the password without needing old password.

Purpose: If an user has been playing for years enabled auto login, 100% he will forget his old password. In this case, because websites require players to login for services, he won't be able to use his password and can't make a purchase (because website hashes and compared the password with one in the database). So if he's a premium player, just allow to change the password without needing the old one, one way or the other he's connected with a microsoft account.

gamer50082 commented 11 months ago

what website needs password?

ItsVaidas commented 11 months ago

Any website that has a per player balance, forum or something similar. That's why authme has a php api to login via the page with the same credentials

gamer50082 commented 11 months ago

forum such as namelessmc has alternative login methods

kyngs commented 11 months ago

This should probably be controlled by some config option.