CAS 7.0.0-RC5 change passsword issue

[Colin Wilkinson]

Hi,

I have posted this on the cas-user group but got no answers.

I think you have a slight coding mistake in PasswordChangeAction.java. When we were testing change password the other current password was coming back null.

I believe you have a coding mistake in the following lines of code as in the below code you are just setting it back to itself.

            Optional.ofNullable(WebUtils.getCredential(requestContext, UsernamePasswordCredential.class))

                    .ifPresent(credential -> bean.setCurrentPassword(bean.getCurrentPassword()));

What I think you meant was
Optional.ofNullable(WebUtils.getCredential(requestContext, UsernamePasswordCredential.class))
                    .ifPresent(credential -> bean.setCurrentPassword(credential   .getPassword()));

See also https://groups.google.com/a/apereo.org/g/cas-user/c/gjrdaNdZPw0

Regards,
Colin

[Misagh Moayyed]

Thank you for the suggestion. Please put together a pull request that corrects the mistake and we'll take it from there.