You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The current UI allows users to change their password without requiring re-entry of the old password.
Requiring additional authentication during password would enhance system security.
Proposed Solution
Update the password change workflow to require the current password before allowing a new password to be set.
Specifically:
Modify the UI to include a field for the old password.
Update the API to validate the old password as part of the password change request.
The text was updated successfully, but these errors were encountered:
This change requires extensive modifications and thorough testing. It involves:
Removing all calls to ubus to avoid bypass issues.
Creating a new API inside the api-server directory to enforce security checks and password change
Updating the UI to integrate with the new API.
Removing all UI calls togetUciConfig and replacing them with the new API.
Deleting the ns.account API.
These changes will significantly affect the codebase and require comprehensive testing to ensure system stability and security. For more details, refer to Issue #1023.
Instances of getUciConfig were found in the following files:
The current UI allows users to change their password without requiring re-entry of the old password.
Requiring additional authentication during password would enhance system security.
Proposed Solution
Update the password change workflow to require the current password before allowing a new password to be set.
Specifically:
Modify the UI to include a field for the old password.
Update the API to validate the old password as part of the password change request.
The text was updated successfully, but these errors were encountered: