goauthentik / goauthentik/authentik

Redirect for W3C well-known password change URI

Open
#4,695 0 comments 2 reactions 1 assignee Assigned to @BeryJu View on GitHub
enhancement status/reviewing
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**Is your feature request related to a problem? Please describe.**
While still not widely deployed, there is more visibility being given to the (relatively) new W3C draft for a [`.well-known` URI that redirects to the site's password change functionality](https://w3c.github.io/webappsec-change-password-url/). It is a nice convenience feature for sites and services that support it, to quickly go to the account management page to change/update a password and other credentials.

**Describe the solution you'd like**
Redirect `authentik.tld/.well-known/change-password` to the tenant change password flow. This may require extra configuration from the system administrator to allow the flow to be accessed by logged out users, but I think that should be left as an exercise of the implementer.

**Describe alternatives you've considered**
Redirect manually with reverse proxy, but unless the API is called, you must hard-code the path to the flow.

**Additional context**
This is very low priority but should be very easy to implement.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.