Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Send password/activation link to new user #17398

Closed
tflidd opened this issue Jul 4, 2015 · 14 comments
Closed

Send password/activation link to new user #17398

tflidd opened this issue Jul 4, 2015 · 14 comments

Comments

@tflidd
Copy link
Contributor

tflidd commented Jul 4, 2015

An e-mail can be sent to new users. It makes absolutely no sense that the password is not included since users can reset their passwords. This leads to rather strange user creation procedures:
https://forum.owncloud.org/viewtopic.php?f=21&t=29055#p90693 (in german)

@enoch85 already proposed this idea:
#12603 (comment)

@RobinMcCorkell
Copy link
Member

@ghost
Copy link

ghost commented Jul 5, 2015

Sending passwords via E-Mail is an absolutely no-go (at least if the user is not forced to change the password after the first login).

But maybe the mail could contain a link like the lost password page where they can set their own password.

It makes absolutely no sense that the password is not included since users can reset their passwords.

It makes sense as the mail including the password is very likely transported / saved unencrypted after arriving at the mailserver. The password reset page is normally encrypted and so the provider or any other institution (hopefully) can't get a hand on it.

@MorrisJobke
Copy link
Contributor

Sending a link that then shows a page to allow the user to set it's own password is a proper way to handle this "create a user" case.

@ghost
Copy link

ghost commented Jul 6, 2015

Sending a link that then shows a page to allow the user to set it's own password

Yes, this or sending a "One-Time-Password" to the user which needs to be changed on the first login (this needs to be enforced and not optional) are the only acceptable solutions for this.

@jancborchardt
Copy link
Member

What @MorrisJobke said. The one-time-password solution is just a complicated version of the easy link-to-set-own-password method.

@LukasReschke
Copy link
Member

Agreeing with @MorrisJobke and @jancborchardt here.

@MorrisJobke
Copy link
Contributor

00005462

@PVince81
Copy link
Contributor

seems there is a PR with this: #18485

@ted-strauss-K1
Copy link

Subscribing.
Would love to have this feature on OC 8.

@PVince81
Copy link
Contributor

PVince81 commented Apr 6, 2017

@pmaier1 for scheduling. There is a PR already that needs to be revived / finalized: #18485.

@pmaier1 pmaier1 modified the milestones: triage, backlog May 17, 2017
@PVince81
Copy link
Contributor

@imujjwal96 would you like to work on this ? You already have a lot of experience now with password reset and emailing 😄 (it's ok if you don't)

@imujjwal96
Copy link
Contributor

I am kinda busy with my University exams right now. I hope you wouldn't mind if I send a PR by the weekend.

@PVince81
Copy link
Contributor

There is absolutely no urgency, so up to you. Just thought you might be
interested

@PVince81 PVince81 removed this from the triage milestone May 22, 2018
@PVince81 PVince81 added this to the backlog milestone May 22, 2018
@PVince81
Copy link
Contributor

PVince81 commented Feb 5, 2019

already implemented in some other form in 10.0.10

@PVince81 PVince81 closed this as completed Feb 5, 2019
@lock lock bot locked as resolved and limited conversation to collaborators Feb 5, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

10 participants