Skip to content

Conversation

@devishke-orange
Copy link
Contributor

Fixes for

  • OHRM5X-2610
  • OHRM5X-2611
  • ORHM5X-2612
  • OHRM5X-2613 (Partially complete)

- validate emails in ResetPasswordService.php
- sanitize user names in ResetPasswordService.php
- add new page for email failures
- route to new page in RequestResetPasswordController.php
- get resetCode as a hidden input
- use existing validation of reset code to check for modified usernames
- add isEntityAccessible check into attachment controller
- add user active check to auth subscriber and logout if not
@devishke-orange devishke-orange marked this pull request as draft October 21, 2025 14:57
- add checks for terminated employee
- store auth user last modified as session variable
- log out user if session last modified differs from db last modified
- update UpdatePasswordAPI to set last modified
- route on update password screen to trigger session expiry
- add "Session Expiry" lang string
- add work email validation to FE and API
- validate email in email service
@devishke-orange devishke-orange marked this pull request as ready for review October 23, 2025 00:23
@RajithaKumara RajithaKumara changed the title Fixes OHRM5X-2609: Fix general defects Oct 23, 2025
@RajithaKumara RajithaKumara merged commit 1da6720 into orangehrm:5.8 Oct 23, 2025
28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants