Please Log in or Create an account to join the conversation.
Please Log in or Create an account to join the conversation.
Please Log in or Create an account to join the conversation.
The language string needs to be updated to reflect the current behavior. Have added a bug ticket for this.hmm, then I have a different 2.1.2 then you. My CB says "If you forgot both your username and your password, please recover the username first, then the password..." to me that is two steps, with one being unnecessary since I know the email, hence unpleasent UX.
Because if you require username for login they need a way to recover it. If you don't want them to recover it then don't require it for login." If you don't want Lost Username functionality or needing to supply Username for Lost Password then you need to turn off login via username entirely."
==> Why is that a causality?
It's not just a UX change. We're not making some minor HTML adjustments. We'll be rewriting the entire forgot login process to meet modern standards of never sending passwords in emails. They'll be sent a recovery URL, which they'll navigate to and supply a new password at which point that recovery URL has to expire. This is an entirely new recovery process we have to implement. It will not be in a bug fix release so no it won't be in 2.1, but in 2.2 at the earliest and that is probably unlikely depending on current active projects.The ticket gets delayed and pushed to the next version for over a year now. I think for a reasonable UX it needs to be addressed soon. Please consider solving it in a 2.1 version, thanks.
Please Log in or Create an account to join the conversation.
Please Log in or Create an account to join the conversation.
They do not have to recover them individually. All they have to do is select the forgot username and forgot password checkmarks. Select both of them. It then only asks for email address.Ok thanks, that was the lang string but the user still has to do two email loops to recover the password since in most cases username AND password are forgotten and only the email is known. Anyway, to restrict login to email only is the way to go for now to have a straight forward UX.
Please Log in or Create an account to join the conversation.