freeipa

#4440 Add support for bounce_url to /ipa/ui/reset_password.html
Closed: Fixed Opened by adelton.

Closed: Fixed
Reopen Issue

When FreeIPA is used as an authentication provider for web applications, the Apache might attempt PAM authentication for example using mod_intercept_form_submit and find the password expired. In that case, the module might like to redirect the user to a password reset page on FreeIPA to get the password reset -- typically upon the first use of the password after admin (re)set it.

When that password reset passes, the /ipa/ui/reset_password.html page says

Password reset was successful. Return to login page.

pointing to /ipa/ui/login.html on the FreeIPA server. But if the password reset was initiated due to a failed login to external application and not to FreeIPA WebUI itself, we might need a way to specify the URL the user should be redirected to after successful password reset. Adding support for parameter like bounce_url would be nice.

How much more customizable this should get is a question -- we might also want name of that other application, and perhaps the locales that should be used for the password reset page ...

But bounce_url is what is needed for.

A side note: In FreeIPA 4.0 the reset page no longer offers the link to login page. There's just: "Password reset was successful."

Ah. Well, I guess if the bounce_url is specified, the link should be back. And possibly if bounce_text is specified as well, that would be the text of that link.

That way, even FreeIPA itself can bring the link back by specifying those parameters.

Identified as stretch goal for 4.1 in triage meeting.

master:

  • 8288135b5b218cd63d5f5bfba59f6d1f9657af2d webui: add bounce url to reset_password.html

ipa-4-1:

  • 8288135b5b218cd63d5f5bfba59f6d1f9657af2d webui: add bounce url to reset_password.html

not closing yet, there is ongoing discussion on the devel-list.

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1138798

master:

  • 050431c4dd70f024b1644137fb0ad4881ed9e32b webui: adjust behavior of bounce url

ipa-4-1:

  • c946029ba304efe808106da13e1bfd58135821be webui: adjust behavior of bounce url

Updating release notes to reflect the fact that the parameter is called url, not bounce_url, and that it does not redirect back to the originating page, just shows a link prompting user to click it.

And another parameter delay.

Metadata Update from @adelton:
- Issue assigned to pvoborni
- Issue set to the milestone: FreeIPA 4.1

master:

  • 0ed3dfb44ce14d06a198de2b8238cd0df2faf4fc Replace the direct URL with config's one
  • 4da736e7bca5110d99f4d75f0556bed904e15cc2 Add "reset_and_login" view to LoginScreen widget
  • 3a43bf886ba5adbc9cd67aa5559091e087c3235c Use "login" plugin instead of standalone JS file
  • 30bcad4ce31503a23e866008287f98757dd60bc2 Clean up reset_password.js file from project
  • d5c0bae9f464e0ebf68b28fa812101fa157f0cc5 Fix translations of messages in LoginScreen widget
  • 5c32ac3e59438a5c8608685e4f7a2dcc80595e77 Add "bounce" logic from "reset_password.js"
  • b4885d3eb7ebea175fc08d09c4f98fd2d7f0af46 Add tests for LoginScreen widget

ipa-4-7:

  • 7c8ba1d79a11bd8f0be61817c082fb5351e02dd0 Replace the direct URL with config's one
  • ce15361a41ca3b544260e5a828254e0241f3b85e Add "reset_and_login" view to LoginScreen widget
  • 8da9935e980431538083a282db8d104b1475b416 Use "login" plugin instead of standalone JS file
  • 18c878ea12393a9108c4ccf3af6ed021bdc656ec Clean up reset_password.js file from project
  • b7290e4533ca8f2ee687d7bf10c1a63216d70ac2 Fix translations of messages in LoginScreen widget
  • 86f98e546bff76636066a49d8e4405bf733bed0c Add "bounce" logic from "reset_password.js"
  • e24b1f62d1204af5af913562a5ae714247ce8917 Add tests for LoginScreen widget
Metadata
None
None
None
Normal
enhancement
Web UI
1
edewata
The /ipa/ui/reset_password.html page accepts url parameter to provide the user with a back link after successful password reset, to support resets initiated by external web applications. Additional parameter delay automatically redirects back after the specified number of seconds has elapsed.
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.