sosyz opened a new issue, #1400:
URL: https://github.com/apache/answer/issues/1400

   I noticed this discussion #1308 and would like to propose adding a new 
command option for password reset when SMTP is not configured.
   
   ```bash
   ./answer resetPassword [email]
   ```
   
   During execution, the admin would be prompted interactively to enter a new 
password, rather than passing it directly as a command-line argument (for 
better security and usability).
   
   This feature would simplify password management for admins who don’t use 
SMTP or prefer manual resets.
   
   
   ---
   
   Example CLI Flow
   
   ```bash
   $ ./answer resetPassword [email protected]
   [INFO] You are about to reset the password for user: [email protected]
   Enter new password: ********
   Confirm new password: ********
   [SUCCESS] Password for [email protected] has been updated successfully.
   ```
   
   ---
   
   Notes
   
   - The command should verify that the provided email exists before proceeding.
   
   - The password input should be hidden as the user types (no plain-text echo).
   
   - The command could log the action — including the admin username, 
timestamp, and target email — in the Activity table for audit purposes.
   
   ---
   
   Should we allow the admin to press Enter (provide an empty input) and let 
the system automatically generate a secure random password for the user?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to