in reply to Re^3: Ideas for "fixing" PerlMonks 1.0
in thread Ideas for "fixing" PerlMonks 1.0

I see it got successfully bikeshedded into the ditch. Services that offer single-sign-on (SSO) options usually also offer a username/password option, so SSO is not a solution to this problem. You'd still need a password-reset capability.

jdporter - what would it take to make password resets change from the current (email out the plaintext password) to sending out a password-reset link, in the PerlMonks codebase? Is it as simple as an additional SQL table "password_reset" with columns UID, one_time_key, time_requested, and a page that takes the first two as CGI params, asks for a new password, submitting to a second page that takes those 3 values and updates the database by updating the password and deleting the password_reset row? (The time_requested is so it can be cleaned up periodically)

cavac - how does PageCamel do this?

Replies are listed 'Best First'.
Re^5: Ideas for "fixing" PerlMonks 1.0
by jdporter (Paladin) on Dec 18, 2024 at 14:21 UTC
    ... Is it as simple as [a bunch of really complicated sounding stuff] ...

    Yes? :-D If you can write the code, I'm willing to create the db table(s) you'll need. (And I can help you write the code, wrt interfacing with the framework.)

[reply]
      FWIW I have working and long tested code for the whole process of a safe password reset. (100/day over 9 years)

      Still needs to be tested in a second phase, if PM can be migrated to hashed (and longer) passwords.

      Cheers Rolf
      (addicted to the Perl Programming Language :)
      see Wikisyntax for the Monastery

[reply]

        I extend the same offer to you. Let me know what table(s) you need, and then we can start creating the code nodes.

[reply]
Re^5: Ideas for "fixing" PerlMonks 1.0
by LanX (Saint) on Dec 18, 2024 at 09:52 UTC
    Short version

    As pmdev you have access to code search and all documentations and wikis. ¹

    You can also install an old everything and play around.

    Long version

    I've provided you with many links yet to inform yourself and help developing.

    While you haven't provided a single patch yet, you are very vocal in criticizing and demanding change here.

    I somehow doubt you'll ever "take the bait" and start with (non-vocal) contributions.

    Cheers Rolf
    (addicted to the Perl Programming Language :)
    see Wikisyntax for the Monastery

    ¹) PmDev Nodelet

[reply]

      This is the sort of negativity that doesn't do any good for anyone. Please refrain.

[reply]
[reply]

In Section Perl Monks Discussion