- notifications - lists.xwiki.org

[xwiki-contrib/confluence] 2dc2dd: CONFLUENCE-225: Blog articles are not terminal pag...

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki-contrib/confluence Commit: 2dc2ddc31e6b66e8b2ad755a4707264ed0685dc8 https://github.com/xwiki-contrib/confluence/commit/2dc2ddc31e6b66e8b2ad755a… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/internal/input/ConfluenceInputFilterStream.java M confluence-xml/src/test/resources/confluencexml/blogs.test Log Message: ----------- CONFLUENCE-225: Blog articles are not terminal pages in nested mode Commit: b179e320bef5109f358e4db1759060ad71d1bb29 https://github.com/xwiki-contrib/confluence/commit/b179e320bef5109f358e4db1… Author: Raphaël Jakse <raphael.jakse(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/input/ConfluenceInputProperties.java M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/input/LinkMapper.java M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/internal/input/ConfluenceConverter.java M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/internal/input/ConfluenceConverterListener.java M confluence-xml/src/main/java/org/xwiki/contrib/confluence/filter/internal/input/DefaultLinkMapper.java Log Message: ----------- CONFLUENCE-226: Save and load page ids in and from link mappings Compare: https://github.com/xwiki-contrib/confluence/compare/9fd6db1c3012...b179e320… To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/confluence/settings/notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-21571) Change default value of the reset password token lifetime

by XWiki Notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-21571) Change default value of the reset password token lifetime

by XWiki Notifications

1 year, 5 months

1
0
0 0

[xwiki/xwiki-platform]

by XWiki Notifications

Branch: refs/heads/backport-3012-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 5 months

1
0
0 0

[xwiki/xwiki-platform] 9a88bd: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 9a88bd6e23cfef85c776fe50111475600707c035 https://github.com/xwiki/xwiki-platform/commit/9a88bd6e23cfef85c776fe501114… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> (cherry picked from commit b410dad402669c76b0dcec149b1e8bd334c541c4) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 5 months

1
0
0 0

[xwiki/xwiki-platform] 2d6396: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/backport-3012-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 2d639694ba4343f8b5e35212cef7f1df89e377d3 https://github.com/xwiki/xwiki-platform/commit/2d639694ba4343f8b5e35212cef7… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> (cherry picked from commit b410dad402669c76b0dcec149b1e8bd334c541c4) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 5 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 5 months

1
0
0 0

2025

2024

2023

notifications