Skip to content

fix: Don't expose existing emails via reset password and account creation forms - #5254

Closed
larseggert wants to merge 27 commits into
ietf-tools:feat/postgresfrom
larseggert:fix-5156
Closed

fix: Don't expose existing emails via reset password and account creation forms#5254
larseggert wants to merge 27 commits into
ietf-tools:feat/postgresfrom
larseggert:fix-5156

Conversation

@larseggert

@larseggert larseggert commented Mar 1, 2023

Copy link
Copy Markdown
Collaborator

Fixes #5156

@larseggert larseggert changed the title fix: Don't expose which email addresses exist via the reset password … fix: Don't expose which emails exist via the reset password form Mar 1, 2023
@larseggert larseggert changed the title fix: Don't expose which emails exist via the reset password form fix: Don't expose existing emails via reset password and account creation forms Mar 1, 2023

@rjsparks rjsparks left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah - needs a new test that exercises sending the new email.

@codecov

codecov Bot commented Mar 2, 2023

Copy link
Copy Markdown

Codecov Report

Merging #5254 (4ff2e7c) into feat/postgres (795c182) will increase coverage by 0.10%.
The diff coverage is 92.83%.

❗ Current head 4ff2e7c differs from pull request most recent head 306682c. Consider uploading reports for the commit 306682c to get more accurate results

@@                Coverage Diff                @@
##           feat/postgres    #5254      +/-   ##
=================================================
+ Coverage          88.47%   88.58%   +0.10%     
=================================================
  Files                296      294       -2     
  Lines              39805    40071     +266     
=================================================
+ Hits               35219    35496     +277     
+ Misses              4586     4575      -11     
Impacted Files Coverage Δ
ietf/doc/expire.py 95.31% <ø> (ø)
ietf/doc/urls.py 100.00% <ø> (ø)
ietf/group/urls.py 100.00% <ø> (ø)
ietf/idindex/index.py 95.05% <ø> (ø)
ietf/iesg/urls.py 100.00% <ø> (ø)
ietf/ietfauth/forms.py 95.32% <ø> (+0.18%) ⬆️
ietf/ipr/utils.py 53.96% <0.00%> (ø)
ietf/meeting/forms.py 97.02% <ø> (ø)
ietf/meeting/urls.py 81.25% <ø> (ø)
ietf/review/models.py 91.91% <ø> (ø)
... and 57 more

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@larseggert
larseggert requested a review from rjsparks March 2, 2023 10:22
larseggert and others added 3 commits March 2, 2023 10:18
…s#5262)

* fix: Don't offer already-disabled API keys for disablement

Fixes ietf-tools#3441

* Remove test class
)

* fix: Truncate text agenda labels to not overflow colums

Also tweak the spacing some and add a guard for an undefined field.

Fixes ietf-tools#1313

* Fix test

@jennifer-richards jennifer-richards left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comments inline - one trivial, one substantive.

Comment thread ietf/ietfauth/forms.py Outdated
Comment thread ietf/ietfauth/views.py Outdated
…tf-tools#5279)

* fix: Add footer with group interim ics calendar to announce email

Fixes ietf-tools#2939

* Fix test

@rjsparks rjsparks left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have been making changes in feat/postgres around this code, and there is a bunch that will have to change with what you're proposing now if we were to bring it into main and then merge it to postgres. It's painful, and I'm sorry to ask, but could you rebase your branch on feat/postgres and target the PR there instead?

Comment thread ietf/ietfauth/views.py Outdated
…nfo (ietf-tools#5265)

* fix: Add missing closing brace in meta tag

Fixes ietf-tools#3379

* Also fix "obsoleted by" meta information

* name -> canonical_name
Comment thread ietf/ietfauth/views.py Outdated

@jennifer-richards jennifer-richards left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, but @rjsparks mentioned wanting the PR pointed at feat/postgres

@larseggert

Copy link
Copy Markdown
Collaborator Author

Yep, that is next. Wanted to make sure the basic logic is OK now though.

Comment thread ietf/ietfauth/views.py Outdated
jennifer-richards and others added 3 commits March 6, 2023 13:20
ietf-tools#5282)

* fix: Always label agenda session headers with day in meeting time zone

* test: Test day labeling on agenda session header when changing tz

* test: Label timeslot, not session, as 'Session I' etc for agenda tests
@larseggert
larseggert changed the base branch from main to feat/postgres March 7, 2023 09:20
@larseggert

Copy link
Copy Markdown
Collaborator Author

I messed up the rebase and had to do a clean PR. See #5288.

@larseggert larseggert closed this Mar 7, 2023
@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Mar 11, 2023
@larseggert
larseggert deleted the fix-5156 branch April 19, 2023 18:21
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Password reset workflow reports when provided username doesn't exist

4 participants