- notifications - lists.xwiki.org

by XWiki Notifications

Branch: refs/heads/backport-3012-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] 9a88bd: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 9a88bd6e23cfef85c776fe50111475600707c035 https://github.com/xwiki/xwiki-platform/commit/9a88bd6e23cfef85c776fe501114… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> (cherry picked from commit b410dad402669c76b0dcec149b1e8bd334c541c4) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] 2d6396: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/backport-3012-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 2d639694ba4343f8b5e35212cef7f1df89e377d3 https://github.com/xwiki/xwiki-platform/commit/2d639694ba4343f8b5e35212cef7… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> (cherry picked from commit b410dad402669c76b0dcec149b1e8bd334c541c4) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22044) Add back ability to export pages from a CLI

by XWiki Notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-docker-build] cb72e0: [Misc] build-node size optimization

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-docker-build Commit: cb72e0a5cfd96459ddcd13afd4bd10229e10221c https://github.com/xwiki/xwiki-docker-build/commit/cb72e0a5cfd96459ddcd13af… Author: Manuel Leduc <manuel.leduc(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M build-node/Dockerfile Log Message: ----------- [Misc] build-node size optimization Remove one layer by running playwright install and playwright install-debs in the same run. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-docker-build/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki-contrib/cristal] 1e918c: [Misc] Upgrade @playwright/test to 1.42.1

by XWiki Notifications

Branch: refs/heads/main Home: https://github.com/xwiki-contrib/cristal Commit: 1e918c059e4d5ca85b122e3e6971fe1da5da673c https://github.com/xwiki-contrib/cristal/commit/1e918c059e4d5ca85b122e3e697… Author: Manuel Leduc <manuel.leduc(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M .gitignore M pnpm-lock.yaml M web/package.json Log Message: ----------- [Misc] Upgrade @playwright/test to 1.42.1 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki-contrib/cristal/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] fd0b4f: XWIKI-21219: Add a preparation/compilation pass to...

by XWiki Notifications

Branch: refs/heads/feature-deploy-preparedocumentcontent Home: https://github.com/xwiki/xwiki-platform Commit: fd0b4f1f611a13ff89c7980990ccff5aa5481e8d https://github.com/xwiki/xwiki-platform/commit/fd0b4f1f611a13ff89c7980990cc… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-bridge/src/main/java/org/xwiki/bridge/DocumentModelBridge.java M xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/AbstractDocumentTitleDisplayer.java M xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentContentAsyncExecutor.java M xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentTitleDisplayer.java M xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/test/java/org/xwiki/display/internal/DocumentContentDisplayerTest.java M xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-macro/src/test/java/org/xwiki/rendering/internal/macro/DisplayMacroTest.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/LazyXWikiDocument.java M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java M xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/XWikiDocumentTest.java M xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-context/src/main/java/org/xwiki/rendering/internal/macro/context/ContextMacro.java M xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-context/src/test/java/org/xwiki/rendering/internal/macro/context/ContextMacroTest.java M xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-context/src/test/java/org/xwiki/rendering/macro/context/IntegrationTests.java M xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-include/src/test/java/org/xwiki/rendering/internal/macro/include/IncludeMacroTest.java Log Message: ----------- XWIKI-21219: Add a preparation/compilation pass to the document content and title To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (CONFLUENCE-226) Save and load page ids in and from link mappings

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (CONFLUENCE-226) Save and load page ids in and from link mappings

by XWiki Notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] 53a017: XWIKI-21811: Don't display in logs Errors related ...

by XWiki Notifications

Branch: refs/heads/backport-2977-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: 53a017d44abc5ed25c2c6036bc942adf9ab1fa43 https://github.com/xwiki/xwiki-platform/commit/53a017d44abc5ed25c2c6036bc94… Author: Pierre Jeanjean <pierre.jeanjean(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/pom.xml M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm M xwiki-platform-core/xwiki-platform-search/pom.xml M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-ui/pom.xml M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-ui/src/main/resources/Main/DatabaseSearch.xml A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/pom.xml A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/search.css A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/searchSuggest.css A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/searchSuggest.js R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/search.css R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/searchSuggest.css R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/searchSuggest.js Log Message: ----------- XWIKI-21811: Don't display in logs Errors related to ObjectEvaluator when upgrading XWiki (#2977) (cherry picked from commit 7bd3b2b4555370712fd27d029367a81db0c35d1d) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] 7bd3b2: XWIKI-21811: Don't display in logs Errors related ...

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 7bd3b2b4555370712fd27d029367a81db0c35d1d https://github.com/xwiki/xwiki-platform/commit/7bd3b2b4555370712fd27d029367… Author: Pierre Jeanjean <pierre.jeanjean(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/pom.xml M xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-resources/src/main/resources/flamingo/javascript.vm M xwiki-platform-core/xwiki-platform-search/pom.xml M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-ui/pom.xml M xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-ui/src/main/resources/Main/DatabaseSearch.xml A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/pom.xml A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/search.css A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/searchSuggest.css A xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-webjar/src/main/webjar/searchSuggest.js R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/search.css R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/searchSuggest.css R xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-war/src/main/webapp/resources/uicomponents/search/searchSuggest.js Log Message: ----------- XWIKI-21811: Don't display in logs Errors related to ObjectEvaluator when upgrading XWiki (#2977) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] b3010e: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/backport-3012-to-stable-15.10.x Home: https://github.com/xwiki/xwiki-platform Commit: b3010eb004859b0e9906cf21b6c3300c64929f96 https://github.com/xwiki/xwiki-platform/commit/b3010eb004859b0e9906cf21b6c3… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> (cherry picked from commit b410dad402669c76b0dcec149b1e8bd334c541c4) To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform]

by XWiki Notifications

Branch: refs/heads/XWIKI-21571 Home: https://github.com/xwiki/xwiki-platform To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] b410da: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: b410dad402669c76b0dcec149b1e8bd334c541c4 https://github.com/xwiki/xwiki-platform/commit/b410dad402669c76b0dcec149b1e… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/pom.xml M xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/AllIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ForgotUsernameIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java R xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-ui/src/main/resources/XWiki/ResetPasswordRequestClass.xml M xwiki-platform-core/xwiki-platform-oldcore/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/pom.xml M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/ApplicationResources.properties M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/resources/META-INF/components.txt M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/pom.xml A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/AllIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ForgotUsernameIT.java A xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-test/xwiki-platform-security-authentication-test-docker/src/test/it/org/xwiki/security/authentication/test/ui/ResetPasswordIT.java M xwiki-platform-tools/xwiki-platform-tool-configuration-resources/src/main/resources/xwiki.properties.vm Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime (#3012) Change the mechanism of the reset password token to not reset it at each verification code check, but only when the password is actually reset, and when its lifetime expired. Also provide a mandatory document initializer for the ResetPasswordRequest xclass. Change a bit more the logic: if the token lifetime configuration is set to 0 (which was the default) then we automatically remove the reset password request xobject at first wrong attempt (bad verification code): it will prevent any bruteforce attack. Then if there's a token lifetime configuration set, we don't remove the xobject when a bad attempt is performed: user might have used the wrong mail for example. But we do remove the xobject when it's expired. And if it's expired, or if the code was wrong, in both cases we immediately return an error. Move ResetPasswordIT and ForgotUserNameIT from administration-test-docker to a new module security-authentication-test-docker since it's related to security-authentication module now. --------- Co-authored-by: Manuel Leduc <manuel.leduc(a)xwiki.com> To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-platform] 612a55: XWIKI-21571: Change default value of the reset pas...

by XWiki Notifications

Branch: refs/heads/XWIKI-21571 Home: https://github.com/xwiki/xwiki-platform Commit: 612a55ebecc1b405b07125d8a3f32dc2aa5936d4 https://github.com/xwiki/xwiki-platform/commit/612a55ebecc1b405b07125d8a3f3… Author: Simon Urli <simon.urli(a)xwiki.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/ResetPasswordRequestClassDocumentInitializer.java Log Message: ----------- XWIKI-21571: Change default value of the reset password token lifetime * Add missing since To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-21452) Macros info, success, warning and error are only distinguished by colors

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XWIKI-22040) Select tour step order has no name

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XRENDERING-736) Macros info, success, warning and error are only distinguished by colors

by XWiki Notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-docker] b14a8c: XDOCKER-318: Upgrade LTS version to 15.10.8

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-docker Commit: b14a8c5e1f589358100d255be2e0132460c0252a https://github.com/xwiki/xwiki-docker/commit/b14a8c5e1f589358100d255be2e013… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M 15/mariadb-tomcat/Dockerfile M 15/mysql-tomcat/Dockerfile M 15/postgres-tomcat/Dockerfile M build.gradle Log Message: ----------- XDOCKER-318: Upgrade LTS version to 15.10.8 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-docker/settings/notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XDOCKER-318) Upgrade LTS version to 15.10.8

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XDOCKER-318) Upgrade LTS version to 15.10.8

by XWiki Notifications

1 year, 8 months

1
0
0 0

[jira@xwiki.org][Issue] (XDOCKER-318) Upgrade LTS version to 15.10.8

by XWiki Notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-docker] 92d9ab: XDOCKER-318: Upgrade LTS version to 15.10.8

by XWiki Notifications

Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-docker Commit: 92d9aba1274746dde29b8e016347c09562df6689 https://github.com/xwiki/xwiki-docker/commit/92d9aba1274746dde29b8e016347c0… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M 15/mariadb-tomcat/.env M 15/mariadb-tomcat/Dockerfile M 15/mysql-tomcat/.env M 15/mysql-tomcat/Dockerfile M 15/postgres-tomcat/.env M 15/postgres-tomcat/Dockerfile M build.gradle Log Message: ----------- XDOCKER-318: Upgrade LTS version to 15.10.8 To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-docker/settings/notifications

1 year, 8 months

1
0
0 0

[xwiki/xwiki-commons] 8bbd0d: [release] Updated compatibility previous version t...

by XWiki Notifications

Branch: refs/heads/stable-15.10.x Home: https://github.com/xwiki/xwiki-commons Commit: 8bbd0d648246693cebf806599e5e239c39d1d8d5 https://github.com/xwiki/xwiki-commons/commit/8bbd0d648246693cebf806599e5e2… Author: Thomas Mortagne <thomas.mortagne(a)gmail.com> Date: 2024-03-27 (Wed, 27 Mar 2024) Changed paths: M pom.xml Log Message: ----------- [release] Updated compatibility previous version to the one just released. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-commons/settings/notifications

1 year, 8 months

1
0
0 0

2025

2024

2023

notifications