Ignore:
Timestamp:
12/03/19 14:08:11 (4 years ago)
Author:
bnemhaus
Message:

Added feedback to ensure that when attempting to use AuthRegainAccountAccess you provide a username.
Yikes, there is currently no guarantee that you are changing the correct person's password. This needs to be fixed.

File:
1 edited

Legend:

Unmodified
Added
Removed

  • trunk/src/org/expeditee/auth/account/Password.java

    r1472 r1476  
    350350               
    351351                try {
     352                        // TODO: YIKES!  We can currently change anyone's password!
    352353                        AuthenticatorBrowser.getInstance().putKey(userData.get(AuthenticationTag.Username), userData.get(AuthenticationTag.NewPassword), new SecretKeySpec(join, SymmetricAlgorithm));
    353354                } catch (KeyStoreException | NoSuchAlgorithmException | CertificateException | ClassNotFoundException
Note: See TracChangeset for help on using the changeset viewer.