Skip to content
GitLab
Projects Groups Topics Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Register
  • Sign in
  • pleroma pleroma
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributor statistics
    • Graph
    • Compare revisions
  • Issues 647
    • Issues 647
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 88
    • Merge requests 88
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • PleromaPleroma
  • pleromapleroma
  • Issues
  • #2095
Closed
Open
Issue created Aug 29, 2020 by Pete@pContributor

Deactivated accounts can reset their password

Environment

  • Installation type (OTP or From Source): Source, with Soapbox UI ( https://git.freespeechextremist.com/gitweb/?p=pleromae;a=shortlog;h=refs/heads/pl_counter_2e_fedi_2e_live , Soapbox devs will be notified also.)
  • Pleroma version (could be found in the "Version" tab of settings in Pleroma-FE): 2.0.7
  • Elixir version (elixir -v for from source installations, N/A for OTP): Elixir 1.9.0 (compiled with Erlang/OTP 20)
  • Operating system: Debian
  • PostgreSQL version (psql -V): 9.6

Bug description

There's no indicator that an account is deactivated when generating a reset password link or when the user resets their password. (This is a minor bug: they can't log in or anything, but some clients don't properly catch the auth error when logging in, so catching it when resetting the password helps debug an issue where an account is deactivated and an admin is sendng reset links.)

Assignee
Assign to
Time tracking