https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31382

ByWater Sandboxes <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #139249|0                           |1
        is obsolete|                            |

--- Comment #2 from ByWater Sandboxes <[email protected]> ---
Created attachment 139297
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=139297&action=edit
Bug 31382: Pass password_has_expired param to templte

This patch restores the param, while still leaving the check against invalid
login credentials to ensure we don't leak information.

To test:
 1 - enable  EnableExpiredPasswordReset
 2 - Edit a patron to set password to expire in the past
 3 - Attempt opac login as patron
 4 - It fails, but you are redirected to login screen with no info
 5 - Apply patch
 6 - Attempt login
 7 - You are notified password expired and given reset link
 8 - Go back to login screen
 9 - Login with correct username,, wrong password
10 - You are notified of incorrect credentials, not password expiration

Signed-off-by: Andrew Fuerste-Henry <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to