[SYNCOPE-1563] User approval update should send the password only when requested

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.6
• Fix Version/s: 2.1.7, 3.0.0-M0
• Component/s: console
• Assignee: Andrea Patricelli
• Reporter: Andrea Patricelli
• Created: 15/May/20 08:30
• Updated: 11/Sep/20 06:48
• Resolved: 15/May/20 12:25

Description

1. Create an user approval request (through enduser by assigning groupForWorkflowApproval for example).
2. Login into console as an approver, claim and edit the request.
3. If you submit the form the password is added to the payload and a PasswordPatch is ever created with value the hased password taken from UserTO stored into the workflow.

This also affects the mustChangePassword flag, that, if true for the UserTO under approval, is set to false (because password ever changes).

Issue Links

• links to: GitHub Pull Request #188