Hi Dinuka, Regarding #1, yes, definitely a bug. However, you shouldn't use reset password when logging in with CILogon. You would change your password with the institution you use to login with CIlogon.
Regarding #2, yes, we allow users to use the same email address to signup. Going forward, and especially with Custos, we may want to rethink that or make it per-tenant customizable. Some gateways like Galaxy don't allow multiple accounts with the same email address. > On Oct 30, 2020, at 10:43 AM, Dinuka Desilva <[email protected]> > wrote: > > Hi Everyone, > > I was just playing around the django portal [1] and found the following > issues. > > 1) I created an account using the CI logon and then I tried to change the > password. I entered the email address as the username and it actually > validates the username not to have stops. I think that validation shouldn't > be there if the email is taken as the username. If not, I would like to know > what's taken as the username. > <Screenshot 2020-10-30 at 7.53.36 PM.png> > > One other thing, I think it makes sense to get the email address instead of > the username at the forgot password. > > 2) At the same time, I signed up using the manual signup and it allowed me to > use the same email address to signup again. Now, I have two accounts with the > same email address. > > Regards, > Dinuka > > [1] https://django.seagrid.org/ <https://django.seagrid.org/>
smime.p7s
Description: S/MIME cryptographic signature
