Open Bug 1202675 Opened 9 years ago Updated 5 years ago

Make it easy for a person without a password to get a password reset link

Categories

(bugzilla.mozilla.org :: Extensions, enhancement, P3)

Production
enhancement

Tracking

()

People

(Reporter: akkuma+github, Unassigned)

Details

Attachments

(1 file)

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 Steps to reproduce: Attempt to change email address Actual results: Cannot change email as I have no password do to Github login Expected results: Remove requirement for passwords on Github accounts
Assignee: user-accounts → nobody
Component: User Accounts → Extensions: GitHubAuth
Product: Bugzilla → bugzilla.mozilla.org
QA Contact: default-qa
Version: 5.1 → Production
Assignee: nobody → dylan
What is actually needed here is the ability to re-authenticate to github and change the email to another one associated with the same account. Pending some auth re-architecture, this will be possible. As a stop-gap, you can perform a password reset and then use the password to change the email address. I'll leave this bug open until we can change github auth backed accounts without setting a password on them.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Will this also enable using GitHub auth but using a different e-mail address? I'm currently using Persona and like to migrate to GitHub auth but keep my current e-mail address (fb+mozdev@, which is also listed as an associated address in my GitHub account but not the primary address!).
Flags: needinfo?(dylan)
If you have only one bugmail, as long as that bugmail is in the list of emails github has, it will use that one. If you have multiple github emails that are bugzilla accounts, it will prompt you for which one you want to use.
Flags: needinfo?(dylan)
This definitely back log work. It is possible to change an email (by adding a password to the account first) so for the moment there is no rush to do this.
Assignee: dylan → nobody
Priority: -- → P3
That worked, thanks! Should probably be documented somewhere; I was holding off on moving from Persona to GitHub Auth because I thought it would not work with a non-primary e-mail address.

You are currently unable to add a password without entering your current one. Since you don't have a current password when signed in with GitHub, this is impossible.

(In reply to Jonathan Leitschuh from comment #6)

You are currently unable to add a password without entering your current one. Since you don't have a current password when signed in with GitHub, this is impossible.

You can issue a password reset on the login screen. If we provided this functionally closer to the account / email settings this would probably be a more pleasant experience, so redirecting this bug to that.

Type: defect → enhancement
Summary: Inability to change email associated with Github login → Make it eash for a person without a password to get a password reset link
Summary: Make it eash for a person without a password to get a password reset link → Make it easy for a person without a password to get a password reset link

Hmm, such a link is already present.

The entire login flow is likely to be reworked in the next 8 months or so. For now it's pretty clear how to change the email I think.

In the situation where you can't receive email at the old address, I'm hesitant to change that as it has different security properties.

Component: Extensions: GitHubAuth → Extensions
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: