TheDude
/
openproject
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
OpenProject is the leading open source project management software.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
8115 Commits
139 Branches
203 Tags
1.2 GiB
Tag: Branch: Tree: 8c64b6ceb0
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '8c64b6ceb0'
${ noResults }
openproject/features/users/former_passwords.feature

34 lines
1.4 KiB
Raw Normal View History Unescape

Add option to prevent former passwords from being reused Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog
12 years ago
#-- copyright
# OpenProject is a project management system.
#
# Copyright (C) 2012-2013 the OpenProject Team
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License version 3.
#
# See doc/COPYRIGHT.rdoc for more details.
#++
Feature: Former Passwords are banned from reuse
Scenario: A user trying to reuse two former passwords
Given users are not allowed to reuse the last 2 passwords
And I am logged in
When I try to set my new password to "adminADMIN!"
Then there should be an error message
When I try to set my new password to "adminADMIN!New"
Then the password change should succeed
When I try to change my password from "adminADMIN!New" to "adminADMIN!Third"
Then the password change should succeed
When I try to change my password from "adminADMIN!Third" to "adminADMIN!Third"
Then there should be an error message
When I try to change my password from "adminADMIN!Third" to "adminADMIN!New"
Then there should be an error message
When I try to change my password from "adminADMIN!Third" to "adminADMIN!"
Then the password change should succeed
Scenario: Former passwords are allowed
Given users are not allowed to reuse the last 0 passwords
And I am logged in
When I try to set my new password to "adminADMIN!"
Then the password change should succeed