Skip to content

Allow account unlock via email

Drew Blessing requested to merge dblessing/gitlab-ce:add_email_unlock into master

We see a lot of users get confused about what it means when your account gets locked. Many try to reset their password and are still faced with a lockout. With this change, users receive an email that allows them to unlock their account immediately. The previous behavior where the account is auto-unlocked after a time also still works.

I styled the view just to ensure it looks nice if a user happens upon them. However, we don't need to link there IMO because of devise paranoid mode (recently enabled). With paranoid mode, users will get a generic 'auth failed' message even when their account is locked. So, they may not know they were locked until they get the email. In this case, it doesn't make sense to link to a 'resend unlock email' form. The views still need to be there, unless we want to re-implement the controller (this seems simpler).

Screen_Shot_2015-12-09_at_11.21.53_PM Screen_Shot_2015-12-09_at_11.12.25_PM

Merge request reports