...
Summary of Request
If a user enters an invalid username when requesting a Password reset, Lawmaker should return a message to the user, stating the name is not recognised and to contact Support (or words to that effect). Currently, they are taken to the next stage of the process but will not receive an email with the code and unclear what to do next.
It would also be helpful if the ‘Reset your password’ window, indicates to expect a code to be sent via email.
Original Description
Good Morning Tamara, I hope you are well. I wanted to please mention about users resetting passwords themselves using Lawmaker. I have noticed when you click forgot password > Reset you password ( here we would expect the user to remember and know there own username but if you enter any characters (regardless of a valid username) it still takes to he screen: Reset your password ( is there a way perhaps we can alter the backend database to only take the user to this screen if they have a valid and known username )?. I have come across in the last 6 months a few users who have either has the accounts deleted or links expired and have tried to reset there password through the above as the browser after clicking on forgot password > Reset you password - takes you directly to > Reset your password .
Perhaps in the getting started email we include a sentence “Users to activate and authenticate both staging and production accounts.”
Many Thanks
...
Status | Feature logged |
|---|---|
Lawmaker components affected | User and session management |
Raised by organisation(s) | TNA |
Planned version to be included in (if any) | |
Related development ticket(s) |
...