0001375: Activation link appears to be valid even if node did not confirm within the proper time period - PacketFence - BTS

Bug Tracking System

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0001375

PacketFence

captive portal

public

2012-02-03 15:24

2012-02-03 15:37

Reporter

fgaudreault

Assigned To

Priority

low

Severity

tweak

Reproducibility

have not tried

Status

feedback

Resolution

open

Platform

OS

OS Version

Product Version

3.1.0

Target Version

Fixed in Version

Summary

0001375: Activation link appears to be valid even if node did not confirm within the proper time period

Description

It appears that the activation link sent to self-registering node is still valid even if the node did not confirm within the determined time frame (default 10min)

Registering at 13:49
Unreg by pfmon at 13:59
...
Feb 03 14:13:18 email_activation.cgi(0) INFO: Activation code sent to email xxxx successfully verified! Node authorized: xxx (pf::email_activation::validate_code)

Tags

No tags attached.

fixed in git revision

fixed in mtn revision

Relationships

Notes
(0002566) obilodeau (reporter) 2012-02-03 15:37	activation codes are valid for 31 days by default. Not sure if this is something we want to change or not. After all the device is properly unregistered after 10 minutes.. If he still has access to the activation link (from another device or from registration VLAN with a fat mail client) why shouldn't he be able to click on it? So this is definitely confirmed but not an 'issue' IMO. If anyone think it should be fixed let us know why with a good reason and we'll fix it.

Issue History
Date Modified	Username	Field	Change
2012-02-03 15:24	fgaudreault	New Issue
2012-02-03 15:37	obilodeau	Note Added: 0002566
2012-02-03 15:37	obilodeau	Status	new => feedback
2012-02-03 15:37	obilodeau	Severity	minor => tweak

Copyright © 2000 - 2012 MantisBT Group