583780 - Error when trying to change password on non-existent account

Status: RESOLVED FIXED

(Cloud Services Graveyard :: Server: Sync, defect)

Description

[Zandr Milewski [:zandr]]

If you try a password reset on an account that doesn't exist, you get the following error:

An unexpected error occurred. If this continues, please contact support.

This isn't user friendly, and creates an opportunity to enumerate usernames.

Comment 1

[Toby Elliott [:telliott]]

Attachment: Returning a 404 and "User not found" if the username doesn't exist. The proxy will need to detect this behavior.

Comment 2

[Toby Elliott [:telliott]]

Behavior added in http://hg.mozilla.org/services/reg-server/rev/9b75e64df258

Comment 3

[Tony Chung [:tchung]]

This page doesnt exist for staging.  Please advise if there's a workaround testcase so i can verify the fix before pushing to prod.  If not, i'll just take your word and test in prod after push.

Comment 4

[Mike Connor [:mconnor]]

http://services.stage.mozilla.com/reset-password/ points to stage-auth instead of main auth.  Please verify against that.

Comment 5

[Tony Chung [:tchung]]

Attachment: reset password unexpected error screenshot

Still seeing the unexpected error with that link.  see screenshot

Comment 6

[Mike Connor [:mconnor]]

This was working when I posted the link...