Skip to content
This repository has been archived by the owner on Jul 12, 2023. It is now read-only.

Password change without reset email #609

Closed
whaught opened this issue Sep 21, 2020 · 3 comments · Fixed by #652
Closed

Password change without reset email #609

whaught opened this issue Sep 21, 2020 · 3 comments · Fixed by #652
Assignees
@whaught
Labels
kind/enhancement New feature or feature request.

Comments

@whaught
Copy link
Contributor

whaught commented Sep 21, 2020

TL;DR

Currently password-reset email is the only way to change your password. Logged-in users should be able to change it without re-verifying email.

Proposal
Let an authenticated user change their password by confirming the old one and creating a new one.
@sethvargo
Copy link
Member

If they have MFA enabled, we should also re-require it before changing the password.

@whaught
Copy link
Contributor Author

whaught commented Sep 21, 2020

/kind enhancement

@google-oss-robot google-oss-robot added the kind/enhancement New feature or feature request. label Sep 21, 2020
@whaught
Copy link
Contributor Author

whaught commented Sep 22, 2020

/assign

This was referenced Sep 22, 2020
Merged
Merged
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Oct 6, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@whaught whaught

Labels
kind/enhancement New feature or feature request.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Allow authed user to change password whaught/exposure-notifications-verification-server
3 participants
@sethvargo @whaught @google-oss-robot