-
Notifications
You must be signed in to change notification settings - Fork 2
Add a change password interface #23
Copy link
Copy link
Open
Description
Keycloak doesn't seem to provide an easy UI for users to change their own passwords. An admin can add the "update password" required action to force a password change on next login, or users can reset their passwords with the forgotten password flow. A solution to this is:
Knowing that:
- Hackhub knows the username of the logged in user
- User passwords come from LDAP
- 389ds (the LDAP server) supports LDAP password changes
Hackhub can be extended with a password change page:
- Hackhub asks for the current password and the new password
- LDAP bind with the username and current password to ldaps://ldap.57north.org.uk/
- Do the change password over LDAP
- Forget all the password details as Hackhub has no need for them
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels