nextcloud / nextcloud/password_policy

Improve 'password expired' workflow

Open
#678 3 comments 6 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop enhancement good first issue
Dominant language
PHP
Stars
39
Forks
27
Avg merge
1h 36m
Merged PRs (30d)
10

Description

How to use GitHub

  • Please use the 👍 reaction to show that you are interested into the same feature.
  • Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
  • Subscribe to receive notifications on status change and new comments.

Feature request

Which Nextcloud Version are you currently using: (see administration page) 31.0.0

Is your feature request related to a problem? Please describe.
When the password is reported as expired, there's no way to actually reset it, you need to go back to the previous page to find the reset password link.

Describe the solution you'd like
Either add a direct link to the reset password link or directly redirect to the page in question while keeping the info hint.

Additional context
Might be hard to handle with the current implementation unfortunately.

Original request

At the moment, password expired error says use forgot password method but does not link to anything or provide any information about what that is which confuses users, especially non-technical users. I get unnecessary questions from users as an admin about what to do whenever this happens to them, whereas a simple link back to home page in the error message itself would help greatly.

Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the password-expired error and the existing forgot-password or reset-password flow in the password_policy repository. Compare the available redirect and linking behavior, then verify that affected users can reach password reset directly while retaining the explanatory hint.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.