[JS2-813] Redirect from password

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.1.2
• Fix Version/s: 2.2.0
• Component/s: Profiling/Portal Navigation
• Environment: Jetspeed-2.1.2/Solaris10/Java-1.5.0._10
• Assignee: Ate Douma
• Reporter: Jennifer Ford
• Created: 19/Nov/07 17:48
• Updated: 04/Oct/11 21:07
• Resolved: 07/Apr/09 01:07

Description

When the user is redirected from the LoginPortlet to a custom ChangePasswordPortlet due to an expired password, the actionURL points to the original page rather than the currently rendered page. This prevents the processAction from being executed and does not allow the user's password change to be executed.

Steps to reproduce:
1- Create a new user with an expiration in the near future.
2- Validate that the user can log in prior to the expiration. Log out and wait until password has expired.
3- Login to new account. User is redirected to the Update My Account page displaying the Change Password portlet.
4- View source to examine actionURL.