Allow server admins to reset internal user passwords #1182

New Issue

MrUnknownDE · 2026-04-05T18:27:14+02:00

MrUnknownDE commented

2026-04-05 18:27:14 +02:00

Originally created by @adrianeastles on 7/25/2025

Community Contribution License Agreement

By creating this pull request, I grant the project maintainers an unlimited,
perpetual license to use, modify, and redistribute these contributions under any terms they
choose, including both the AGPLv3 and the Fossorial Commercial license terms. I
represent that I have the right to grant this license for all contributed content.

Description

This introduces essential administrative capabilities for user account management. Server administrators can now reset passwords for internal users through a new password reset feature in the admin interface. The implementation includes a dedicated API endpoint for secure password reset operations, enhanced backend logic for password generation and validation, and updated frontend components in the admin user management table.

How to test?

Navigate to Admin Interface
- Go to Admin → Users
- Locate an internal user in the users table
Initiate Password Reset
- Click on the user row to open user details
- Click the "Reset Password" button
- Confirm the action in the dialog that appears
Handle Password Reset
- If SMTP is enabled: Check the user's email for the password reset link
- If SMTP is disabled: The password reset link will be displayed on screen for you to copy
- Use the provided link to access the password reset page
- Enter a new password and confirm it
Verify Success
- Confirm the password reset was successful
- Test logging in with the new password
- Verify the old password no longer works

Screenshots

*Originally created by @adrianeastles on 7/25/2025* ## Community Contribution License Agreement By creating this pull request, I grant the project maintainers an unlimited, perpetual license to use, modify, and redistribute these contributions under any terms they choose, including both the AGPLv3 and the Fossorial Commercial license terms. I represent that I have the right to grant this license for all contributed content. ## Description This introduces essential administrative capabilities for user account management. Server administrators can now reset passwords for internal users through a new password reset feature in the admin interface. The implementation includes a dedicated API endpoint for secure password reset operations, enhanced backend logic for password generation and validation, and updated frontend components in the admin user management table. ## How to test? 1. **Navigate to Admin Interface** - Go to **Admin** → **Users** - Locate an internal user in the users table 2. **Initiate Password Reset** - Click on the user row to open user details - Click the **"Reset Password"** button - Confirm the action in the dialog that appears 3. **Handle Password Reset** - **If SMTP is enabled**: Check the user's email for the password reset link - **If SMTP is disabled**: The password reset link will be displayed on screen for you to copy - Use the provided link to access the password reset page - Enter a new password and confirm it 4. **Verify Success** - Confirm the password reset was successful - Test logging in with the new password - Verify the old password no longer works ## Screenshots <img width="1340" height="721" alt="Screenshot 2025-07-25 at 8 54 05 pm" src="https://github.com/user-attachments/assets/3e7ec038-79ab-4b7c-baf5-616e12c16dc2" /> <img width="647" height="337" alt="Screenshot 2025-07-25 at 8 54 10 pm" src="https://github.com/user-attachments/assets/4160b08f-11c1-4e57-90b8-b68a3a3f78b3" /> <img width="627" height="328" alt="Screenshot 2025-07-25 at 8 54 15 pm" src="https://github.com/user-attachments/assets/dd987b2c-1f82-4e31-95f6-8a8b12540954" />

MrUnknownDE closed this issue

2026-04-05 18:27:14 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1182