New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

忘记密码 - 通过邮箱 / 手机号找回安全增强 #1564

Open

narasux opened this issue Feb 20, 2024 · 0 comments

Assignees

Labels

tenant

Collaborator

narasux commented Feb 20, 2024 •

edited

Loading

现状：吞掉一切异常，如邮箱找不到对应用户，用户不可修改密码，用户状态异常，发送邮件 / 短信失败等，都告诉用户是成功的

目的：避免通过测试可知该邮箱 / 手机号的状态（是否已被使用）

缺点：体验很差，如果填错了邮箱之类的，完全不知道错误，只能最后查看日志

改进方案：
简单版本：支持配置开启详细的错误提示，在安全环境可以启用（全局 or 租户配置？）
复杂版本：接入防水验证码服务，如 https://cloud.tencent.com/document/product/1110/36334

narasux assigned narasux and Xmandon

nannan00 mentioned this issue

登录的用户状态提示支持可配置 #1434

Open

nannan00 added the tenant label

nannan00 unassigned Xmandon

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment