Hi, 

I've been digging through the documentation and the source for about 2-3 
hours now.

As stated on this page: 
https://apereo.github.io/cas/development/password_management/Password-Management.html
It says : "Those who have forgotten their account password may receive a 
secure link with a time-based expiration policy at their registered email 
address and/or phone."

To implement this behaviour I followed the link to the SMS Notification 
Guide.
https://apereo.github.io/cas/development/notifications/SMS-Messaging-Configuration.html

I set the propertys:
        cas.smsProvider.rest.method=POST
        cas.smsProvider.rest.url=http://somedummy.url
and started the CAS App. 

Accoring to the debug log some things happened:
- setting this values initializes the CommunicationsManger class with my 
defined SmsSender Class -> 
https://github.com/apereo/cas/blob/master/core/cas-server-core-util-api/src/main/java/org/apereo/cas/util/io/CommunicationsManager.java
- following the code of the manager and the code which use the manager, 
sending SMS is possible
- when using the reset password flow the 
SendPasswordResetInstructionsAction class is invoked -> 
https://github.com/apereo/cas/blob/master/support/cas-server-support-pm-webflow/src/main/java/org/apereo/cas/pm/web/flow/actions/SendPasswordResetInstructionsAction.java

Calling the doExecute method results in an exception, stating that no mail 
sender is defined. Which is absolutly true.


The problem therefore is, that the whole code for password resets is only 
working when using emails. 
Also there is no call at all to the sendSms function of the 
CommunicationsManager, therefore it impossible to send a SMS with a reset 
link.


I already checked the commits for 1 year but it seems that is never worked.



In my opinion, implementing this feature would lead to a generic rest 
interface which could be used to send the reset-link to another, more 
specialized service, which would handle the transfer to the user.
In my case I would connect a service which creates mails that are enriched 
by meta data from my companys CRM system. 
One could even connect a service which generates morse code, light signals 
or something else because the transport channel would be out of the scope 
from CAS.


Best regards
Christian













-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/f9240083-681c-4cdc-ad42-f4c149a90c9e%40apereo.org.

Reply via email to