nextcloud/server

Trigger password reset email from user management

Open

#14,411 opened on Feb 27, 2019

View on GitHub
 (5 comments) (3 reactions) (0 assignees)PHP (4,865 forks)batch import
1. to developenhancementfeature: authenticationfeature: users and groupsgood first issuesecurity

Repository metrics

Stars
 (34,953 stars)
PR merge metrics
 (Avg merge 20d) (627 merged PRs in 30d)

Description

As of now the password reset email can only be triggered via the lost password page. In some cases this is disabled. It would be useful to trigger the email nevertheless as an admin from the user management.

Use case: having LDAP and DB users - LDAP users are not allowed to change the password but the reset should still be triggered by an admin for the DB users.

The email is sent here:

https://github.com/nextcloud/server/blob/ac8a6e22448cd4077e73b68731764bd60775665a/core/Controller/LostController.php#L314-L370

Contributor guide

Research direction
Explore the LostController's sendEmail method in core/Controller/LostController.php and identify where to add an admin triggered password reset. Look for existing admin endpoints or create a new one in the user management section.
Tech stack
php
Domain
backendauthentication
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
GitPHPNextcloud development environment
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70