5848da810e
This patch adds the capability to override minPasswordLenth and RequireStrongPassword settings by category To test: 1. koha-shell kohadev 2. koha-mysql kohadev 3. drop database koha_kohadev; 4. create database koha_kohadev; 5. go to admin page and start webinstaller. There continue the steps until onboarding. 6. reach step 3 of onboarding and create a new administrator patron CHECH => Password control woks as normal (Minimum length 3 and strong required) 7. finish Koha installation and enter admin with your new administrator 8. set minPasswordLength to 3 and RequireStrongPassword to “Don’t require” 9. Create a new category (CAT2 from now on.. CAT1 is the category you made in onboarding process) and set minimum password length to 8 and require strong password 10. Create two new patrons, one with CAT1(patron1) and one with CAT2 (patron2) CHECK => In both cases, try different combinations of length and strength. For patron1 the only requirement is to have 3 letters, but for patron2 the minimum length will be 8 and will require strong password. CHECK => Try changing patron category before saving. Password requirements will change with category change. 11. Edit CAT1 and set minimum password length to 5 12. Go to patron1 details page, and change password. CHECH => Now password minimum length is 5, but still it doesn’t require strong password 13. Edit CAT1, leave blank minimum password length and set require strong password to yes. 14. Go to patron1 details page, and change password. CHECH => Password minimum length is back to 3, but now strong password is required 15. Set minimum password length in CAT2 to 12. 16. Go to patron2 details page, and click to fill a random generated password CHECK => generated password should be 12 characters length 17. Set PatronSelfRegistration to Allow in admin settings 18. Go to OPAC and fill self registration from. CHECK => Play with patron category. For each change in category, password requirements are modified. CHECK => Set CAT1 as patron category, set ‘aA1’ as password (or another valid password for CAT1) and before hitting submit button, change to CAT2. Form should enter invalid state, and CAT2 password requirements should be displayed as error in password input. 19. Create a patron for CAT1 and another for CAT2, leaving password blank CHECK => For CAT1’s patron, generated password length is 8 (minimum length for generated passwords), but for CAT2’s patron should be 12 20. In admin set PatronSelfRegistrationVerifyByEmail to require 21. Fill self registration form again with CAT2 as category CHECK => Password requirements works as previous case. 22. Leave password blank and click submit 23. select * from message_queue; 24. Copy the link in the message and paste it in OPAC CHECH => Generated password is 12 characters long. (Copy user id for next steps) 25. In admin set OpacResetPassword to Allow 26. Go back to OPAC, reload and click on “Forgot password?” link 27. Paste user id and click submit 28. Repeat steps 23 and 24 CHECK => Info message says “Your password must contain at least 12 characters, including UPPERCASE, lowercase and numbers.” CHECK => enter an invalid password and you’ll get the same message in warning. 29. Login OPAC with the last user and your newly created password 30. Go to “Change your password” option CHECK => Info message says “Your password must contain at least 12 characters, including UPPERCASE, lowercase and numbers.” CHECK => enter an invalid password and you’ll get the same message in below “New password” input. 31. prove t/db_dependent/AuthUtils.t t/db_dependent/Koha/Patron/Category.t 32. Sign off Sponsored-by: Northeast Kansas Library - NEKLS Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
165 lines
9.3 KiB
Text
165 lines
9.3 KiB
Text
[% USE Koha %]
|
|
[% USE Categories %]
|
|
[% INCLUDE 'doc-head-open.inc' %]
|
|
<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle | html %][% ELSE %]Koha online[% END %] catalog › Forgotten password recovery</title>
|
|
[% INCLUDE 'doc-head-close.inc' %]
|
|
[% BLOCK cssinclude %][% END %]
|
|
[% BLOCK jsinclude %]
|
|
<script>
|
|
$(function() {
|
|
$("#CheckAll").click(function(){
|
|
$("[name=deleteRequest]").attr('checked', true);
|
|
return false;
|
|
});
|
|
|
|
$("#CheckNone").click(function(){
|
|
$("[name=deleteRequest]").attr('checked', false);
|
|
return false;
|
|
});
|
|
|
|
$("select#type").change(function() {
|
|
$("fieldset#serial, fieldset#book, fieldset#chapter").hide()
|
|
$("fieldset#" + $(this).val() ).show();
|
|
});
|
|
});
|
|
</script>
|
|
[% END %]
|
|
</head>
|
|
[% INCLUDE 'bodytag.inc' bodyid='opac-password-recovery' %]
|
|
[% INCLUDE 'masthead.inc' %]
|
|
|
|
<div class="main">
|
|
<nav aria-label="breadcrumb">
|
|
<ul class="breadcrumb">
|
|
<li class="breadcrumb-item">
|
|
<a href="/cgi-bin/koha/opac-main.pl">Home</a>
|
|
</li>
|
|
<li class="breadcrumb-item" aria-current="page">
|
|
<a href="#">Forgotten password recovery</a>
|
|
</li>
|
|
</ul>
|
|
</nav>
|
|
|
|
<div class="container-fluid">
|
|
<div class="row">
|
|
<div class="col-lg-2">
|
|
[% IF ( OpacPublic ) %]
|
|
<div id="navigation">
|
|
[% INCLUDE 'navigation.inc' IsPatronPage=0 %]
|
|
</div>
|
|
[% END %]
|
|
</div>
|
|
<div class="col-6 order-first order-md-first order-lg-2 maincontent">
|
|
<h3>Forgotten password recovery</h3>
|
|
[% IF (hasError) %]
|
|
<div class="alert alert-warning">
|
|
<h3>Error</h3>
|
|
<p>
|
|
[% IF (sendmailError) %]
|
|
An error has occurred while sending you the password recovery link.
|
|
<br/>Please try again later.
|
|
[% ELSIF (errNoBorrowerFound) %]
|
|
No account was found with the provided information.
|
|
[% ELSIF errResetForbidden %]
|
|
<span id="password-reset-forbidden">Sorry, your password cannot be changed online.</span>
|
|
[% ELSIF (errMultipleAccountsForEmail) %]
|
|
Account identification with this email address only is ambiguous.
|
|
<br />Please use the field 'Login' as well.
|
|
[% ELSIF (errAlreadyStartRecovery) %]
|
|
The process of password recovery has already been started for this account
|
|
[% IF username %]
|
|
("<strong>[% username | html %]</strong>")
|
|
[% ELSIF email %]
|
|
("<strong>[% email | html %]</strong>")
|
|
[% END %]
|
|
<br/>You should have received an email with a link to reset your password.
|
|
<br/>If you did not receive this email, you can request a new one: <a href="/cgi-bin/koha/opac-password-recovery.pl?resendEmail=true&email=[% email | uri %]&username=[% username | uri %]">Get new password recovery link</a>
|
|
[% ELSIF (errPassNotMatch) %]
|
|
The passwords do not match.
|
|
[% ELSIF password_too_short %]
|
|
<li>Password must be at least [% minPasswordLength | html %] characters long.</li>
|
|
[% ELSIF password_too_weak %]
|
|
<li>Password must contain at least one digit, one lowercase and one uppercase.</li>
|
|
[% ELSIF password_has_whitespaces %]
|
|
<li>Password must not contain leading or trailing whitespaces.</li>
|
|
[% ELSIF (errLinkNotValid) %]
|
|
The link you clicked is either invalid, or expired.
|
|
<br/>Be sure you used the link from the email, or contact library staff for assistance.
|
|
[% END %]
|
|
</p>
|
|
<p>Please contact the library if you need further assistance.</p>
|
|
</div> <!-- /div.alert.alert-warning -->
|
|
[% END # /IF hasError %]
|
|
|
|
<div id="password-recovery">
|
|
[% IF (! Categories.can_any_reset_password ) %]
|
|
<div class="alert alert-info">You can't reset your password.</div>
|
|
[% ELSIF (password_recovery) %]
|
|
<form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
|
|
<input type="hidden" name="koha_login_context" value="opac" />
|
|
<p>To reset your password, enter your login or your email address.</p>
|
|
<fieldset class="brief">
|
|
<div class="form-group">
|
|
<label for="username">Login:</label>
|
|
<input class="form-control" type="text" id="username" size="40" name="username" value="[% username | html %]" />
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label for="email">Email:</label>
|
|
<input class="form-control" type="text" id="email" size="40" name="email" value="[% email | html %]" />
|
|
</div>
|
|
|
|
<fieldset class="action">
|
|
<input type="submit" value="Submit" class="btn btn-primary" name="sendEmail" />
|
|
</fieldset>
|
|
</fieldset>
|
|
</form>
|
|
[% ELSIF (new_password) %]
|
|
[% UNLESS ( errLinkNotValid ) %]
|
|
<form action="/cgi-bin/koha/opac-password-recovery.pl" method="post" autocomplete="off">
|
|
<input type="hidden" name="koha_login_context" value="opac" />
|
|
<fieldset class="brief">
|
|
[% IF ( RequireStrongPassword ) %]
|
|
<div class="alert alert-info">Your password must contain at least [% minPasswordLength | html %] characters, including UPPERCASE, lowercase and numbers.</div>
|
|
[% ELSE %]
|
|
<div class="alert alert-info">Your password must be at least [% minPasswordLength | html %] characters long.</div>
|
|
[% END %]
|
|
<div class="form-group">
|
|
<label for="password">New password:</label>
|
|
<input class="form-control" type="password" id="password" size="40" name="password" />
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label for="repeatPassword">Confirm new password:</label>
|
|
<input class="form-control" type="password" id="repeatPassword" size="40" name="repeatPassword" />
|
|
</div>
|
|
|
|
<fieldset class="action">
|
|
<input type="hidden" name="username" value="[% username | html %]" />
|
|
<input type="hidden" name="uniqueKey" value="[% uniqueKey | html %]" />
|
|
<input type="submit" value="Submit" class="btn btn-primary" name="passwordReset" />
|
|
</fieldset>
|
|
</fieldset>
|
|
</form>
|
|
[% END # /UNLESS errLinkNotValid %]
|
|
[% ELSIF (mail_sent) %]
|
|
<div class="alert alert-info">
|
|
<p>
|
|
You will receive an email shortly.
|
|
<br/>Please click the link in this email to finish the process of resetting your password.
|
|
<br/>This link is valid for 2 days starting now.
|
|
</p>
|
|
<a href="/cgi-bin/koha/opac-main.pl">Return to the main page</a>
|
|
</div>
|
|
[% ELSIF (password_reset_done) %]
|
|
<div class="alert alert-success">
|
|
<p>The password has been changed for user "[% username | html %]".</p>
|
|
<a href="/cgi-bin/koha/opac-user.pl">Click here to login.</a>
|
|
</div>
|
|
[% END # /IF (! Categories.can_any_reset_password ) %]
|
|
</div><!-- / #password-recovery -->
|
|
</div><!-- / .span10 -->
|
|
</div><!-- / .row-fluid -->
|
|
</div><!-- / .container-fluid -->
|
|
</div><!-- / .main -->
|
|
[% INCLUDE 'opac-bottom.inc' %]
|