Bug #814
Underdark Login Framework - User creation and removal, password changes
Start date:
2012-05-11
Due date:
% Done:
0%
Estimated time:
Description
The Underdark Login Framework can currently be used to authenticate existing users, but facilities for creating new users is lacking. This is necessary because it has specific expectations for passwords and salts.
In addition, removing users and changing passwords is also core functionality that needs to be provided.
Related issues
Associated revisions
History
#1 Updated by Niek Bergman almost 12 years ago
It would also be useful if the password updating method would take the current password along with a new password, so the user password can be revalidated (as is good practice before letting a user change their password) without having to relogin the user.
#2 Updated by Elmer de Looff almost 12 years ago
- Subject changed from ULF has no methods to create/delete users or change passwords yet. to Underdark Login Framework - User creation and removal, password changes
- Description updated (diff)
- Category set to Model
- Target version set to µWeb beta release
added methods to the Login Framework's model to verify passwords on the user object instead of in the verification method itself, this allows for more configurable implementations. Methods for hashed passwords based on random salts, and to update passwords have also been added. This refs #814.