Ricerca
Chiudere
  1. Benvenuto
  2. I Forum
  3. API users
  4. Change password non working for a user with API keys
Elenco dei foro Elenco dei messaggi

Change password non working for a user with API keys

  • woodhouse
    Conto chiuso

    75 messaggi

    Italia

    Hi there,
    this morning I received a mail about new password security and the same mail arrived to any other user I know.

    First of all I was a bit disappointed to know that before this change the case of the letters was not taken into account.

    But the problem is that one of my customer who requested the API Keys some years ago, was not able to reset the password.
    When she tried to login, the system does not recognize the password
    She followed the link to change the password and entered her mail address.
    The mail arrived and she followed the link inside the mail
    The system asked for the new password for ... [user]-test !!!!! ( [user] stands for the username )
    That's crazy!!!!!
    She tried a second time and the system asked for the new password for ... [user]-dev
    She tried a third time and ... Too many attermpt !!!!!!!

    Now she is no longer able to login.

    Someone should be fired!
  • woodhouse
    Conto chiuso

    75 messaggi

    Italia

    While waiting for an answer to this problem, I discovered that Delcampe simply changed the password to lowercase!
    We change all the capital letters in the password to lowercase and magically we were able to login.

    That means that, at least before those changes, the password were not encrypted, or, at least, encrypted with a bad algorithm.

    As stated before: Someone should be fired!
  • @thomas
    Amministratore
    @thomas

    351 messaggi

    Belgio

    Dear Daniele,

    We're sorry for this inconvenience. I assure you passwords have always been encrypted.

    As a temporary solution if one of your customer wants to reset his password you can advise him to enter his nickname rather than his email.

    Excuse us again for the inconvenience.
  • Account eliminato
    Account eliminato

    0 messaggi

    Albania

    Le informazioni non sono più disponibili perché l'account di questo utente è stato eliminato (Regolamento RGPD).