665854 - Need a password reset process for mozillians.org

Status: VERIFIED FIXED

(Participation Infrastructure :: Phonebook, defect, P1)

Description

[Andrew Findlay]

User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: 

Users will forget or lose passwords.
How will mozillians.org help the user to set a new password?
If this involves e-mail then do we use the same address that is shown as the person's main contact e-mail, or should we support a second (hidden) address for this purpose?

Reproducible: Always

Comment 1

[Andrew Findlay]

How do we cope with lost usernames? Anon cannot search on anything other than username...
Maybe let user specify their registered e-mail address to the reset agent. If it matches a valid account they get mailed both username and password. What if it matches more than one account?

Should we let people register PGP keys so that reset mail can be encrypted?

Comment 2

[Aakash Desai [:aakashd]]

Austin, I think you said you are working on this; Do you think this is something we can tackle on 1.0 instead of 1.1?

Comment 3

[Austin King [:ozten]]

Yes, I have Password Change done and am working on Reset Password flow.

Neither is on -dev yet.

Comment 4

[Austin King [:ozten]]

This is code complete. Filed Bug#682207, which is a related feature missing for 1.0.
I've submitted a pull request for code review. 

https://github.com/mozilla/mozillians/pull/12

Comment 5

[Dave Dash [:davedash, :dd] (assign all bugs to mbrandt)]

This was merged.

Comment 6

[Tobias (:Tobbi) Markus]

Verified password reset process is present on the page and works.