[GH-ISSUE #892] dedicated, password change-only page #786

New issue

Closed

opened 2026-02-27 11:13:32 +03:00 by kerem · 2 comments

kerem commented

2026-02-27 11:13:32 +03:00

Owner

Originally created by @jficz on GitHub (Jun 13, 2016).
Original GitHub issue: https://github.com/modoboa/modoboa/issues/892

It would be great to have a URL dedicated to password changes/resets only, mostly for scenarios where Modoboa serves as a configuration and management backend and users don't interface with Modoboa directly.

A (preferably skinable) simple web page with a simple form: login, old password, new password, repeat password and perhaps a reset password button sending new password to secondary e-mail (does Modoboa have this? Didn't find this option).

The idea is to isolate users from Modoboa in scenarios where they do not come to contact with it in any use cases and having them log in to an unknown environment might be confusing.

Please note that API is not the same as this feature and writing own service to change passwords via API is not viable as it would have to hold a full-access API key which is a security risk. This should be operable by user without any privileges.

Originally created by @jficz on GitHub (Jun 13, 2016). Original GitHub issue: https://github.com/modoboa/modoboa/issues/892 It would be great to have a URL dedicated to password changes/resets only, mostly for scenarios where Modoboa serves as a configuration and management backend and users don't interface with Modoboa directly. A (preferably skinable) simple web page with a simple form: login, old password, new password, repeat password and perhaps a reset password button sending new password to secondary e-mail (does Modoboa have this? Didn't find this option). The idea is to isolate users from Modoboa in scenarios where they do not come to contact with it in any use cases and having them log in to an unknown environment might be confusing. Please note that API is not the same as this feature and writing own service to change passwords via API is not viable as it would have to hold a full-access API key which is a security risk. This should be operable by user without any privileges.

kerem

2026-02-27 11:13:32 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-02-27 11:13:32 +03:00

Author

Owner

@almereyda commented on GitHub (Nov 23, 2016):

It seems Modoboa identities contain a secondary email field already.

Password-reset pages are also a high demand from our communities.

@almereyda commented on GitHub (Nov 23, 2016): It seems Modoboa identities contain a secondary email field already. Password-reset pages are also a high demand from our communities.

kerem commented

2026-02-27 11:13:32 +03:00

Author

Owner

@tonioo commented on GitHub (Oct 27, 2017):

A password reset service is available since 1.9.0.

@tonioo commented on GitHub (Oct 27, 2017): A password reset service is available since 1.9.0.

kerem referenced this issue

2026-02-27 11:20:33 +03:00

[PR #786] [MERGED] Cleanup #2016