CVS log for loncom/interface/resetpw.pm

Up to [LON-CAPA] / loncom / interface

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Typo in rev. 1.50

- Bug 6955 IP-based blocking. Pass user'sIP address as third arg to
  loncommon::blockcheck() and second to loncommon::blocking_status().

- Bug 6914.
  Replace hostname with alias when creating absolute URLs, if alias in use.

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- Rules for length and/or characters in password (internal) checked client-
  side when user sets new password via Preferences or Forgot Password utility.
- Prompt retry setting new password after following e-mailed time-limited link
  (Forgot Password utility) when invalid username and/or e-mail address
  submitted.

- Include domain when checking captcha submission
- Point "Go back" link at /adm/resetpw so a new captcha is displayed.

- Domain Configuration for Passwords for internally authenticated users.
  - Rules for LON-CAPA passwords can include: number of user's previous
    passwords to save (with reuser by that user disallowed).

- Forgot Password utility
  - Support configurable: link lifetime, case sensitivity (for username and
    e-mail address), information required, e-mail types, and custom text.
  - Bug 6648: captcha can be enabled for public-facing web form.

- Fix typo in rev. 1.42

- Call Apache::lonnet::hostname($lonhost) before accessing
  $Apache::lonnet::protocol{$lonhost) so %Apache::lonnet::protocol is populated.

- Remove leading and training white space from form submission
- Log username, domain, and e-mail address in case of mismatch between
  date from stage 1 and date from stage 2.

- On a multi-domain server, the key for the current server in the hash
  returned by lonnet::internet_dom_servers($udom) need not be the lonHostID.

- Ensure header is sent before body.

- When using Forgot Password utility, user will be redirected to their
  home server, if the domain they select is for a different institution
  than the current server.
- Disable autocapitalization for input textboxes for username and e-mail
  address for forgot password form, if user agent suggests a mobile device.
- Client-side validation for non-empty username and e-mail textboxes.

- Blocking of user actions during an exam can include changing a password
  via user preferences or using "Forgot password?" (internal auth).

- Update some keys in de.pm which were originally multi-sentence,
  for consistency with code simplification made in resetpw.pm rev 1.29.
- Reduce number of phrases required for contacting helpdesk in case of a problem
  by unifying such phrases to a single phrase:
  "Please contact the [_1]helpdesk[_2] for assistance."

- Remove blank line.

Exclude HTML tags from translation phrases.
Update corresponding German translation file phrases and translations.

- Bug #6643: Improved standard layout and navigation for password successfully set
- Remove deprecated breadcrumb component (no new information anyway)
- Correct headline level
- Filename style for e-mail address

Internationalization: Allow proper translation - don't concatenate phrase fragments

- Administrator e-mail perlvar in loncapa.conf is lonAdmEMail not lonAdminEmail.

- Coding style.  White space changes only.
  - Standard LON-CAPA indent is 4 spaces.

Improvements to Reset Password Form - Phase 1 (enter personal data):
- Consistent and standard layout
- Error style for server side errors
- Consistent wording
- Re-use existing phrases
- Highlight domain description
- Consistent navigation in case of errors (new subroutine for all cases):
    - Actionbox
    - Offer "Go back" link to encourage users to try again instead of directly contacting the helpdesk (, e.g. only a little typo).
    - Offer link to helpdesk to allow to provide all needed data in case trying again didn't help

Use standard styles (info/warning/error):

- Customization for MITrelate.
  - Backport 1.27.
  - Replace LON-CAPA with Mechanics Online in a number of phrases.

- Get contact e-mail address from domain configuration.
- Default to lonSupportEMail from perlvars if none set.

- Customization for MITrelate.
  - &send_mail() takes additional (sixth) arg  -- text to use in
    subject line of e-mail sent to user.

- Customization for MITrelate.
  - "Mechanics Online" name preferred to "Learn Physics".

- Customization for MITrelate.
  - Support link from Sign-Up screen, where user attempts to sign-up for a
    new account when one has already been created for him/her.
  - Eliminate case sensitivity when resetting password, unless
    the username containing upper case characters exists.
  - Simplify interface.
  - Similar to 1.22.2.2 and 1.22.2.4.

- Bacloprt 1.26.

- Customization for GCI_3.
 - Support for multiple Concept Inventories.

- Customization for GCI_3
 - Support link from Sign-Up screen, where faculty attempts to sign-up for a
   new GCI WebCenter account when one has already been created for him/her.

- Customization for GCI_3
  - Backport 1.26.

- Breadcrumbs
- Use "pick_box" from lonhtmlcommon to generate table.
- Extra line breaks in e-mail message to improve readability.

- Backport 1.25.

Bug #5528:
Explicitly send character encoding UTF-8 in outgoing e-mail to ensure correct character display in user's e-mail client.

- Customization for GCI_3
  - Eliminate case sensitivity when resetting password, unless
    the username containing upper case characters exists.
  - Simplify interface for specific GCI needs.

In process of removing remote control, remote navmap and different icon modes code
- removed no_inline_link argument from loncommon::start_page, loncommon::bodytag
- removed subs
    o loncommon::head: it wasn't used
    o loncommon::endheadtag: functionality now covered by loncommon::headtag
    o lonmenu::registerurl: functionality moved to loncommon::headtag, because it was the only function that called registerurl
- removed remote control related translations in de.pm
- refactoring and cleanup

Removed double spacing from translation phrases
 -> HTML/Browsers ignore them anyway
 -> less error prone for translators
Adjusted language files accordingly (de, es, zh)

- Customization for GCI_3 (corresponding custom phrases in gci.pm).

- Backport 1.20, 1.21, 1.22.

- Backport 1.19, 1.20, 1.21, 1.22.

- Update documentation.
- Remove some trailing whitespace.

- Start documentation.

- Feedback to point to user's homeserver if reset fails.

- Backport 1.18, 1.19
- Custom GCI phrases on reset password page.

- Better choice of default domain for multi-domain servers.

- When a user initiates the reset password process for an internally
  authenticated account, the e-mail address entered in the web form
  can now be any of: permanentemail, critnotification or notification.
  - The earlier enforced precedence order:
     permanentemail > critnotification > notification  is eliminated.
  - The e-mail check now supports multiple notification addresses for a single type.

- Customization for GCI_2.

- Customization for GCI_1
- Add version ID.

Banned HTML tags (<a>) from translation files
and adjusted corresponding translation phrases

(more to do)

XHTML conform tags (input, br, hr)

- Change "Proceed" form element from "button" to "submit".
- Add missing &mt().

Added missing CVS Ids for automatic version numbering to script header
(Irrespective if the script is still in use or not)

consistent wording, email -> e-mail, catalog information -> metadata, e-mail vs. message

consistent notation of e-mail in sentences and E-mail in titles.

Localization:
Corrected/Optimized &mt() usage

Bug 5604.
- resetpw.pm : move call to loncommon::start_page() so it occurs after call
               to lonlocal::get_language_handle().
- lonerrorhandler.pm : Need to call lonlocal::get_language_handle() for cases where
                       errors occur on pages which don't use PerlAuthzHandler lonacc.

- Replace localtime() with lonlocal::locallocaltime().

Localization:
- Added missing &mt(...)
- Optimized some &mt() calls
(more changes will follow)

- typo

- eliminating the domain hash globals in favor of functional access

More room in textboxes for input.

- style
- xhtml
- improved some translation strigns

Modify tmpput handler in lond to use md5_hash of random items when creating token for password resets to provide less deterministic token.

Add an extra argument to lonnet::tmpput() so context is included when request sent to lond (if context argument was supplied).  It appears some uses of lond::tmpput make use of the number_IP_number structure of current token.

Add Forgot Password link to log-in page.

Some wording changes in reset password page.

More comprehensive check of e-mail for valid format.

Require user to provide e-mail address when requesting password change, and compare with e-mail in record associated with LON-CAPA user account.

- style
- xhtml
- use standard LONCAPA routines

Allow internally authenticated users who have forgotten their password access to set a new one based on a token sent to an e-mail account associated with their LON-CAPA account. Future mods: strengthen challenge by asking for student ID? Use less deterministic token ID from lond::tmpput() - MD5 hash?