[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17079047#comment-17079047 ] Sebastian Berg commented on OFBIZ-4361: --- Hi [~nmalin], you wrote {quote}Also I will open an issue

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17054347#comment-17054347 ] Jacques Le Roux commented on OFBIZ-4361: W/o other comments I'll close in a week > Any ecommerce

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17054017#comment-17054017 ] Nicolas Malin commented on OFBIZ-4361: -- Yes sure > Any ecommerce user has the ability to reset

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17053958#comment-17053958 ] Jacques Le Roux commented on OFBIZ-4361: Hi Nicolas, Deepak, What do you think now about this

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16952910#comment-16952910 ] Jacques Le Roux commented on OFBIZ-4361: We have a possible time syncing issue between servers

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16946599#comment-16946599 ] Jacques Le Roux commented on OFBIZ-4361: Hi Deepak, I have started a discussion on dev ML about

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16943324#comment-16943324 ] Deepak Dixit commented on OFBIZ-4361: - let me give it a try, will update soon > Any ecommerce user

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16939436#comment-16939436 ] Nicolas Malin commented on OFBIZ-4361: -- Ok no common-theme, no JWTManager, no SecurityUtil, too

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16938473#comment-16938473 ] Nicolas Malin commented on OFBIZ-4361: -- let me check before > Any ecommerce user has the ability to

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16938454#comment-16938454 ] Jacques Le Roux commented on OFBIZ-4361: Hi Nicolas, I tried again to backport in R17 and it's

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16935314#comment-16935314 ] Jacques Le Roux commented on OFBIZ-4361: Thanks Nicolas, Did you try R17 (R16 must be much

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16935134#comment-16935134 ] Nicolas Malin commented on OFBIZ-4361: -- I backported the commits r1866478 and r1866518 to release

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16934521#comment-16934521 ] Nicolas Malin commented on OFBIZ-4361: -- I merge it on one screen and worked fine. The problem is

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16931124#comment-16931124 ] Jacques Le Roux commented on OFBIZ-4361: BTW, those are still there, maybe useful: {code:xml}

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16931123#comment-16931123 ] Jacques Le Roux commented on OFBIZ-4361: OK got, it It's about UserLoginSecurityQuestion not

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16930652#comment-16930652 ] Jacques Le Roux commented on OFBIZ-4361: Thanks Nicolas, sounds good to me. > Any ecommerce user

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16929340#comment-16929340 ] Nicolas Malin commented on OFBIZ-4361: -- {quote} This feature has been removed by the patch though I

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16925154#comment-16925154 ] Jacques Le Roux commented on OFBIZ-4361: As Pierre Smits initially reported bq. another issue is

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16925118#comment-16925118 ] Jacques Le Roux commented on OFBIZ-4361: It should be noted that with the current implementation

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16924551#comment-16924551 ] Jacques Le Roux commented on OFBIZ-4361: While working on OFBIZ-10751 I re-read comments I made

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16924347#comment-16924347 ] Jacques Le Roux commented on OFBIZ-4361: Hi Nicolas, +1 for backporting, I tried, it should not

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16924346#comment-16924346 ] Jacques Le Roux commented on OFBIZ-4361: At revision: 1866518, I have slightly modified the

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16924324#comment-16924324 ] Nicolas Malin commented on OFBIZ-4361: -- Thanks Jacques for your review and commit. It's huge

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16923581#comment-16923581 ] Jacques Le Roux commented on OFBIZ-4361: Hi Nicolas, I have committed your modified patch at

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916818#comment-16916818 ] Nicolas Malin commented on OFBIZ-4361: -- {quote} I only applied

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916812#comment-16916812 ] Nicolas Malin commented on OFBIZ-4361: -- {quote}With this patch, nobody is forced to do anything.

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916811#comment-16916811 ] Jacques Le Roux commented on OFBIZ-4361: In webpos "Get Password Hint" does not work either. Got

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916805#comment-16916805 ] Jacques Le Roux commented on OFBIZ-4361: The French content for loginservices.token_incorrect

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916802#comment-16916802 ] Jacques Le Roux commented on OFBIZ-4361: I only applied

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916792#comment-16916792 ] Jacques Le Roux commented on OFBIZ-4361: Concerns in comments: Tobias's comment - 22/Jun/17

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916756#comment-16916756 ] Jacques Le Roux commented on OFBIZ-4361: I tried to use the CORS stuff and it still works. In

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916658#comment-16916658 ] Jacques Le Roux commented on OFBIZ-4361: About concerns found in this issue: In description

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916613#comment-16916613 ] Nicolas Malin commented on OFBIZ-4361: -- Yes I added a jwt generation by added a key salt with

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916577#comment-16916577 ] Jacques Le Roux commented on OFBIZ-4361: OK, I think I got it: you can use the link in email only

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916564#comment-16916564 ] Jacques Le Roux commented on OFBIZ-4361: The missing key exists on trunk demo but not locally.

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16916529#comment-16916529 ] Jacques Le Roux commented on OFBIZ-4361: I wrote above {quote}There is one thing wich is worrying

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16915752#comment-16915752 ] Nicolas Malin commented on OFBIZ-4361: -- [reflective] hmm, I restarted from scratch and all work for

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16915671#comment-16915671 ] Jacques Le Roux commented on OFBIZ-4361: Mmm last thought: the last one is certainly due to a

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16915668#comment-16915668 ] Jacques Le Roux commented on OFBIZ-4361: Unsure, after Nicolas fixing OFBIZ-11175, I simply dit a

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16915641#comment-16915641 ] Jacques Le Roux commented on OFBIZ-4361: For those interested, of course using Gradle continous

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16915619#comment-16915619 ] Jacques Le Roux commented on OFBIZ-4361: Gradle continous build is really useful: {noformat}

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16914874#comment-16914874 ] Jacques Le Roux commented on OFBIZ-4361: Thanks Nicolas, I'll have a look ASAP > Any ecommerce

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16914219#comment-16914219 ] Nicolas Malin commented on OFBIZ-4361: -- I updated the last patch

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16912021#comment-16912021 ] Nicolas Malin commented on OFBIZ-4361: -- I load my first version with use JWT token to identify a

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16898908#comment-16898908 ] Nicolas Malin commented on OFBIZ-4361: -- cat hunting ! I take up this issue from the cave where I

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16869416#comment-16869416 ] Jacques Le Roux commented on OFBIZ-4361: Hi Guys, what is the situation here? > Any ecommerce

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16738525#comment-16738525 ] Jacques Le Roux commented on OFBIZ-4361: Hi Gil, The advantage of a cookie is that it makes a

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16737546#comment-16737546 ] Gil Portenseigne commented on OFBIZ-4361: - Hi [~jacques.le.roux], The idea was to not be logged

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16737535#comment-16737535 ] Gil Portenseigne commented on OFBIZ-4361: - Hello [~Dennis Balkir], Yes I think that is possible,

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16735627#comment-16735627 ] Jacques Le Roux commented on OFBIZ-4361: Hi Dennis, bq. what kind of limitations there are with

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16735614#comment-16735614 ] Dennis Balkir commented on OFBIZ-4361: -- Hi [~gil portenseigne], I just have a small question. In my

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16735139#comment-16735139 ] Jacques Le Roux commented on OFBIZ-4361: Hi Gil, There is one thing wich is worrying me, why

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16734443#comment-16734443 ] Jacques Le Roux commented on OFBIZ-4361: Hi Gil, I did not think at all the details yet, but

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16734372#comment-16734372 ] Gil Portenseigne commented on OFBIZ-4361: - h2. *Idea using JWT :* To remain simple with password

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16734336#comment-16734336 ] Nicolas Malin commented on OFBIZ-4361: -- Hello, With all your remarks we started with Gil a

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16733934#comment-16733934 ] Jacques Le Roux commented on OFBIZ-4361: Hi Dennis, bq. I don't really know if it woud be much

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16732074#comment-16732074 ] Dennis Balkir commented on OFBIZ-4361: -- Hi [~jacques.le.roux], [~soledad], first some things on

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16730299#comment-16730299 ] Jacques Le Roux commented on OFBIZ-4361: Hi Nicolas, You are maybe the only one to know all.

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16730155#comment-16730155 ] Nicolas Malin commented on OFBIZ-4361: -- Yesterday, I started the review and I propose to try a merge

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16730148#comment-16730148 ] Jacques Le Roux commented on OFBIZ-4361: Hi Michael, The original problem of this issue is that

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16728185#comment-16728185 ] Jacques Le Roux commented on OFBIZ-4361: Michael, I had a look but not enought time to answer

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16725641#comment-16725641 ] Jacques Le Roux commented on OFBIZ-4361: As soon as I get a chance, this weekend I guess... >

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16724985#comment-16724985 ] Michael Brohl commented on OFBIZ-4361: -- I'm not sure if a JWT is what we'll need here... Could you

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16724974#comment-16724974 ] Jacques Le Roux commented on OFBIZ-4361: Hi Dennis, We could set the duration of the JWT

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16724890#comment-16724890 ] Dennis Balkir commented on OFBIZ-4361: -- Hi [~jacques.le.roux], since we need to somehow preserve

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16721193#comment-16721193 ] Jacques Le Roux commented on OFBIZ-4361: Dennis, Michael, Just a quick preliminary 1st pass,

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16712477#comment-16712477 ] Nicolas Malin commented on OFBIZ-4361: -- Hi Michael, I'll try next week > Any ecommerce user has

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16711693#comment-16711693 ] Jacques Le Roux commented on OFBIZ-4361: Hi Michael, Yes I'll try > Any ecommerce user has the

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16711177#comment-16711177 ] Michael Brohl commented on OFBIZ-4361: -- Hi [~jacques.le.roux], [~soledad], any chance to review the

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16646175#comment-16646175 ] Nicolas Malin commented on OFBIZ-4361: -- Sorry for the delay, I started Dennis's patch review

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16614620#comment-16614620 ] Jacques Le Roux commented on OFBIZ-4361: I agree Pierre, this is a blocker to me. > Any

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16614580#comment-16614580 ] Pierre Smits commented on OFBIZ-4361: - Should the 'priority' of this ticket not be raised? This seems

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16614515#comment-16614515 ] Michael Brohl commented on OFBIZ-4361: -- Hi [~jacopoc], without surprise I would recommend the

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16614503#comment-16614503 ] Jacopo Cappellato commented on OFBIZ-4361: -- Thank you all for your contributions. It would be

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16613482#comment-16613482 ] Dennis Balkir commented on OFBIZ-4361: -- Hi all. Some words on the patch I provided:  

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16609071#comment-16609071 ] Dennis Balkir commented on OFBIZ-4361: -- Hi [~pfm.smits], I am currently working on the solution

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16608999#comment-16608999 ] Pierre Smits commented on OFBIZ-4361: - There are patches available for this ticket! Is any of these

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16608958#comment-16608958 ] Pierre Smits commented on OFBIZ-4361: - Due to (externa)l circumstances I did not pay much attention

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16608411#comment-16608411 ] Michael Brohl commented on OFBIZ-4361: -- Hi [~soledad], sorry for the late reply and delay with this

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16599623#comment-16599623 ] Nicolas Malin commented on OFBIZ-4361: -- Can we have a chance to see your works [~mbrohl] ? If you

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16585741#comment-16585741 ] Michael Brohl commented on OFBIZ-4361: -- [~gpierre], we will describe the functionality along with

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16585063#comment-16585063 ] Gaudin Pierre commented on OFBIZ-4361: -- Hi [~mbrohl] , Can you explain the way you use to fix this

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16584739#comment-16584739 ] Nicolas Malin commented on OFBIZ-4361: -- [~mbrohl] nice, don't worries I haven't planned to commit

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16584710#comment-16584710 ] Michael Brohl commented on OFBIZ-4361: -- Please wait before taking any action to commit anything. As

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16584069#comment-16584069 ] Gaudin Pierre commented on OFBIZ-4361: -- +1 ! > Any ecommerce user has the ability to reset anothers

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583998#comment-16583998 ] Nicolas Malin commented on OFBIZ-4361: -- I reviewed the patch and have some remark before commit it :

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583586#comment-16583586 ] Gaudin Pierre commented on OFBIZ-4361: -- Many thanks !! > Any ecommerce user has the ability to

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583562#comment-16583562 ] Nicolas Malin commented on OFBIZ-4361: -- [~mbrohl], [~gpierre] I can work on it today > Any

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583551#comment-16583551 ] Michael Brohl commented on OFBIZ-4361: -- Hi [~gpierre], we are working on it, yes. > Any ecommerce

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16583548#comment-16583548 ] Gaudin Pierre commented on OFBIZ-4361: -- Hi all, Is there any interest in this fix? thanks > Any

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16430349#comment-16430349 ] Benjamin Jugl commented on OFBIZ-4361: -- I just reviewed the patch and did some changes myself. I like

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16397610#comment-16397610 ] Gaudin Pierre commented on OFBIZ-4361: -- I have just added a patch allowing to change password by

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16379800#comment-16379800 ] Deepak Dixit commented on OFBIZ-4361: - For token thing we can use JJWT token as well, I added a patch

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16378770#comment-16378770 ] Gaudin Pierre commented on OFBIZ-4361: -- _Why not keep it simple and store this information on the

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16155318#comment-16155318 ] Jacques Le Roux commented on OFBIZ-4361: +1 for a new Token Entity with a parametrised way of

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16155171#comment-16155171 ] Deepak Dixit commented on OFBIZ-4361: - _Why not keep it simple and store this information on the user

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16061087#comment-16061087 ] mz4wheeler commented on OFBIZ-4361: --- Hey guys: My main point when I wrote this jira was the objection

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16060506#comment-16060506 ] Tobias Laufkötter commented on OFBIZ-4361: -- Independent from the actual process the technical

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16059394#comment-16059394 ] Michael Brohl commented on OFBIZ-4361: -- +1, this sounds like a good process to me, Tobias. > Any

[jira] [Commented] (OFBIZ-4361) Any ecommerce user has the ability to reset anothers password (including admin) via "Forget Your Password"

[ https://issues.apache.org/jira/browse/OFBIZ-4361?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16059335#comment-16059335 ] Tobias Laufkötter commented on OFBIZ-4361: -- {quote}One remaining case is when the user forgets

  1   2   >