0
mkinc created
- ABP Framework version: v7.2.1
- UI type: Angular
- DB provider: EF Core
- Tiered (MVC) or Identity Server Separated (Angular): Separated AuthServer
- Steps to reproduce the issue:
- Create user, enabling the 'Should change password on next login'.
- Login as user
- When prompted for new password, use the original password for current, new and new (repeat)
- Expected behaviour: Error on submit / validation error that doesn't allow submit.
- Actual behaviour: Password is allowed and user is logged in.
I can't really see any justification to suggest this isn't a bug since forcing a user to change password on next login is something used for security. Untested: Does this affect the 'Force users to periodically change password' feature as well?
5 Answer(s)
-
0
Hi,
thanks for your report. I created an internal ticket for this and will get back to you.
Kind regards Nico
-
0
Thanks. When can I expect to hear about this? Can we get the question back for this?
-
0
The fix will be included in the preview version for 7.3. I refunded the question.
-
0
Thanks Nico.
We'll try updating to 7.3 when it's not in preview and let you know if we have any issues with the behaviour.
Matt
-
0
Ok i will close this issue for now then. Feel free to reopen it its not working when updating.
