[idempiere/idempiere] 58615d: IDEMPIERE-7060 - Redesign Forgot Password flow (#3...

[Diego Ruiz]

Branch: refs/heads/master
Home: https://github.com/idempiere/idempiere
Commit: 58615da52f9779a9ee618cba88736b3b4ab95665
https://github.com/idempiere/idempiere/commit/58615da52f9779a9ee618cba88736b3b4ab95665
Author: Diego Ruiz <1206532...@users.noreply.github.com>
Date: 2026-07-14 (Tue, 14 Jul 2026)

Changed paths:
A migration/iD13/oracle/202607072011_IDEMPIERE-7060.sql
A migration/iD13/oracle/202607082008_IDEMPIERE-7060.sql
A migration/iD13/postgresql/202607072011_IDEMPIERE-7060.sql
A migration/iD13/postgresql/202607082008_IDEMPIERE-7060.sql
A org.adempiere.base/OSGI-INF/defaultpasswordresetservice.xml
M org.adempiere.base/src/org/adempiere/base/Core.java
A org.adempiere.base/src/org/adempiere/base/DefaultPasswordResetService.java
A org.adempiere.base/src/org/adempiere/base/IPasswordResetService.java
A org.adempiere.base/src/org/adempiere/base/PasswordResetServiceFactory.java
A org.adempiere.base/src/org/compiere/model/I_AD_PasswordResetToken.java
A org.adempiere.base/src/org/compiere/model/MPasswordResetToken.java
M org.adempiere.base/src/org/compiere/model/MSession.java
M org.adempiere.base/src/org/compiere/model/MSysConfig.java
A org.adempiere.base/src/org/compiere/model/X_AD_PasswordResetToken.java
M org.adempiere.ui.zk/WEB-INF/src/org/adempiere/webui/panel/LoginPanel.java
A org.adempiere.ui.zk/WEB-INF/src/org/adempiere/webui/panel/PasswordResetPanel.java
M org.adempiere.ui.zk/WEB-INF/src/org/adempiere/webui/window/LoginWindow.java
A org.idempiere.test/src/org/idempiere/test/base/PasswordResetTest.java
M org.idempiere.zk.breeze.theme/src/metainfo/zk/lang-addon.xml
M org.idempiere.zk.breeze.theme/src/web/theme/default/css/fragment/login.css.dsp
M org.idempiere.zk.iceblue_c.theme/src/metainfo/zk/lang-addon.xml
M org.idempiere.zk.iceblue_c.theme/src/web/theme/iceblue_c/css/fragment/login.css.dsp

Log Message:
-----------
IDEMPIERE-7060 - Redesign Forgot Password flow (#3303)

* IDEMPIERE-7060 - Redesign Forgot Password flow: code-based reset via shared core service

* IDEMPIERE-7060 - Add Unit tests

* IDEMPIERE-7060 - Address coderabbit comments

* IDEMPIERE-7060 - Suggestion by Carlos Ruiz implemented, do not hash the code, mark the column and field as Encrypted instead

* IDEMPIERE-7060 - Minor UX improvement and enforce CHANGE_PASSWORD_MUST_DIFFER when setting a new password

* IDEMPIERE-7060 - Minor fix, console error Msg not found

* IDEMPIERE-7060 - Implement a PasswordResetServiceFactory configurable via SysConfig to allow swappability

* IDEMPIERE-7060 - Move migration scripts to iD13

* IDEMPIERE-7060 - Configurable code length as requested in peer review

* IDEMPIERE-7060 - Fix Msg not found message

* IDEMPIERE-7060 - Implement cache solution to not expose real email by showing the same messages when a wrong email attempts to guess codes/Implement sleep on wrong code attempts, mirroring the LoginPanel brute attack force protection

* IDEMPIERE-7060 - changes requested by Carlos Ruiz



To unsubscribe from these emails, change your notification settings at https://github.com/idempiere/idempiere/settings/notifications