diff options
| author | Arthur Schiwon <blizzz@arthur-schiwon.de> | 2021-09-10 22:40:10 +0200 |
|---|---|---|
| committer | Arthur Schiwon <blizzz@arthur-schiwon.de> | 2021-09-10 22:48:16 +0200 |
| commit | a843d3c5db44e1c5646980f7f7d6442f4c7dcce9 (patch) | |
| tree | 0a0be2e1a929c4b5f8d5a3fc0ebac44fba11c877 /apps/workflowengine/js/workflowengine.js | |
| parent | 99a146803353ee93a6935606b411954b9ad845f5 (diff) | |
| download | nextcloud-server-a843d3c5db44e1c5646980f7f7d6442f4c7dcce9.tar.gz nextcloud-server-a843d3c5db44e1c5646980f7f7d6442f4c7dcce9.zip | |
allow using of disabled password reset mechanism for special cases
- LostController has three endpoints
- door opener email() still rejects
- resetform(), reachable from mail, checks the token first and may report
that password reset is disabled
- setPassword() got its check removed as it is behind CSFR anyway and still
requires a valid token
- this allows special cases like activating a freshly created guest account
Signed-off-by: Arthur Schiwon <blizzz@arthur-schiwon.de>
Diffstat (limited to 'apps/workflowengine/js/workflowengine.js')
0 files changed, 0 insertions, 0 deletions