Merge pull request #2139 from ProgrammeVitam/bug_13571-password-reset…

…-number-of-uses Fix #13571: Password reset token should be revoked after 1st use
ProgrammeVitam · Oct 15, 2024 · 6505287 · 6505287
2 parents ade72e8 + 98f9c09
commit 6505287
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/cas/cas-server/src/main/config/cas-server-application-dev.yml b/cas/cas-server/src/main/config/cas-server-application-dev.yml
@@ -109,7 +109,7 @@ cas.authn.pm.reset.mail.text: "Changez de mot de passe via le lien: %s"
 cas.authn.pm.reset.mail.from: serveur-cas@noreply.com
 # 1 Day : 24 * 60 Minutes to reset password
 cas.authn.pm.reset.expiration: PT1440M
-cas.authn.pm.reset.number-of-uses: 2
+cas.authn.pm.reset.number-of-uses: 1
 cas.authn.pm.reset.mail.attribute-name: email
 cas.authn.pm.reset.security-questions-enabled: false
 cas.authn.pm.reset.include-server-ip-address: false

diff --git a/cas/cas-server/src/main/config/cas-server-application-recette.yml b/cas/cas-server/src/main/config/cas-server-application-recette.yml
@@ -81,7 +81,7 @@ cas.authn.pm.reset.mail.text: "Changez de mot de passe via le lien: %s"
 cas.authn.pm.reset.mail.from: serveur-cas@noreply.com
 # 1 Day : 24 * 60 Minutes to reset password
 cas.authn.pm.reset.expiration: PT1440M
-cas.authn.pm.reset.number-of-uses: 2
+cas.authn.pm.reset.number-of-uses: 1
 cas.authn.pm.reset.mail.attribute-name: email
 cas.authn.pm.reset.security-questions-enabled: false
 cas.authn.pm.reset.include-server-ip-address: false

diff --git a/deployment/roles/vitamui/templates/cas-server/application.yml.j2 b/deployment/roles/vitamui/templates/cas-server/application.yml.j2
@@ -115,7 +115,7 @@ cas.authn.pm.reset.mail.subject: Requete de reinitialisation de mot de passe
 cas.authn.pm.reset.mail.text: "Changez de mot de passe via le lien: %s"
 cas.authn.pm.reset.mail.from: {{ smtp.cas.sender }}
 cas.authn.pm.reset.expiration: PT{{ smtp.cas.expiration }}M
-cas.authn.pm.reset.number-of-uses: 2
+cas.authn.pm.reset.number-of-uses: 1
 cas.authn.pm.reset.mail.attribute-name: email
 cas.authn.pm.reset.security-questions-enabled: false
 cas.authn.pm.reset.include-server-ip-address: false