search

nerzhul / ncsms-android

repository for the ncsms on Android
95 stars 38 forks source link

Password change for configured account? #178

Open al-ign opened 6 years ago

al-ign commented 6 years ago

Steps to reproduce

  1. Change password for account in NextCloud instance
  2. Search for a way to change password in App
  3. ...
  4. No profit.

Expected behaviour

Changed password to configured account, so NC will not kick in brute-force blocking

Actual behaviour

No way to change password in application, app uses old password, brute-force protection of NC kicks in and blocks reverse proxy IP, everyone suffer.

Server configuration

Nextcloud version: 12.0.5

Webserver: Apache

HTTPS: On reverse proxy only

Client configuration

Android version: 1.3.3, 1.3.4

Phone: Moto RAZR XT910, Android 4.2

Nextcloud SMS app version: 1.12.2

Notes

Also, there was no indication of wrong credentials, notification bar had only ''failed to sync'' message, and pop-up (toast?) notification showed ''synced successfully'' when I tried manual sync.

nerzhul commented 6 years ago

exact, it's a critical bug i didn't realize

DJaeger commented 4 years ago

Should be obsolete if #215 would be implemented