CESNET/perun — pull request #324 by zlamalp (2014-06-04 09:25:44+00:00)
Title: CORE, RPC, GUI: allow non-authz one time password reset

- Allow users to reset their passwords in supported namespaces even if
they don't have another valid identity to perform authorized password change.
- VO manager can send password reset request email to user (member) from
member's details page in GUI.
- Authz information used to determine validity of request is encrypted in URL using AES.
Values are also Base64 encoded to be safe for URL usage.
- Password can be changed only once and only in limited time after sending request.
- Delete all requests when user is deleted.

Before accepting this to production, following changes in configuration must be made:

- allow non-authz access to the /non/pwd-reset/ URL pointing to non-authz PasswordReset.html
- add new entries to perun.properties file:
perun.pwdreset.secretKey = [cipher passphrase - min. ASCII 16 chars/bytes for AES 128]
perun.pwdreset.initVector = [cipher vecor - min. 16 chars/bytes for AES 128 /
only hexa characters 0-F are allowed]
perun.pwdreset.validationWindow = [validity limit in hours / backup value in code is 6]