nextcloud / nextcloud/password_policy
Configurable expiry for activation link and password reset link
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 39
- Forks
- 27
- Avg merge
- 1h 36m
- Merged PRs (30d)
- 10
Description
Follow up to https://github.com/nextcloud/server/pull/11857
@Knot3n
If there were individual configuration options for these two expiry times under settings / security, server admins could set the expiry timeout on their own, depending on their environment and needs.
7d could be set as default for the activation link and 1h as default for the password reset link.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the linked pull request 11857 and the password_policy settings under Settings/Security. Define separate activation-link and password-reset expiry options with defaults of 7d and 1h, then verify that administrators can configure both values and that each link uses the selected timeout.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100