nextcloud / nextcloud/server

Trigger password reset email from user management

Open
#14,411 5 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

1. to develop enhancement feature: authentication feature: users and groups good first issue security
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

As of now the password reset email can only be triggered via the lost password page. In some cases this is disabled. It would be useful to trigger the email nevertheless as an admin from the user management.

Use case: having LDAP and DB users - LDAP users are not allowed to change the password but the reset should still be triggered by an admin for the DB users.

The email is sent here:

https://github.com/nextcloud/server/blob/ac8a6e22448cd4077e73b68731764bd60775665a/core/Controller/LostController.php#L314-L370

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with core/Controller/LostController.php at lines 314-370 to understand the existing reset-email flow. Then locate the user-management admin entry point, which the issue does not name. Done means an administrator can trigger the reset email from user management for the stated LDAP/DB-user scenario without relying on the lost-password page.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.