[OFBIZ-5176] Some enhancement to password change.

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: Trunk
• Fix Version/s: Trunk
• Component/s: framework
• Assignee: Jacques Le Roux
• Reporter: Leon
• Created: 11/Apr/13 14:56
• Updated: 15/Dec/23 13:42
• Resolved: 03/Jun/13 09:34

Description

1. Make "password must be different from last passwords" function work. (--// FIXME: switching to salt-based hashing breaks this history lookup below)
2. When there's error occurs, return "requirePasswordChange" instead of "error". Then, "password change" form will not be redirected to "login" form if there's any kind of "error".
3. Fix one "deprecated" findByAnd call.
4. Return the "error" message instead of "event" message when password expires.

Issue Links

• relates to: OFBIZ-12873 [SECURITY: CVE-2023-51467] Replaced direct null checks on username, password, and token with UtilValidate.isEmpty() method calls for consistency.