Randy Watler wrote:
+1Ate/All,
I have these additional Login/Security requirements that have made there way into a formal requirements process for our portal implementation:
- Send email to end user for forgotten passwords, (offered on failed login attempts if user email address known).
- Ability of a non-authenticated end user to create and populate a disabled user account to be enabled later by admin/moderator, (includes automatic email notification of the request and approved/denied messages if user email address known).+1
I think these features are fairly typical for most sites requiring end user authentication. Is there any interest in, (or objections to), these features being added to J2 proper? If there is interest, I will generate a JIRA issue and we can see if there are other similar capabilities that can be added at the same time.
+1
I myself have been asked by my client to provide more/correct feedback to a user trying to login but whose account already has been disabled (too many failed login attempts). The current functionality clearly isn't giving good feedback at all. The problem to do this better though is that there isn't a formal way to communicate information back *through* the JAAS implementation (i.e. the Tomcat JAASRealm) to the client (J2). We need to provide our own channel or such for that.
Thanks!
Randy
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
