Unable to Reset Owner Password

NeilC · November 3, 2019, 4:09pm

Using squidex:3.4.0 image hosted on a Kubernetes cluster. I seem to have forgotten or accidentally changed my password and am unable to login. I had originally set the IDENTITY__ADMINPASSWORD environment variables and thought that by changing it now to a new password would reset it, but it hasn’t.

The new generated password (and the previous one) adheres to the password requirements here https://docs.squidex.io/01-getting-started/installation/configuration

I’d be grateful for any advice.

Sebastian · November 4, 2019, 11:16am

Hi, you can only delete your user in the database at the moment and recreate it then. But I can also create an option to allow a reset.

Sebastian · November 4, 2019, 2:09pm

I have introduced a new setting called IDENTITY__ADMINRECREATE which, when set to true, will reset the password and add the admin permission to the user.

NeilC · November 6, 2019, 7:39pm

Hi Sebastian, thanks for the quick reply. I managed to recover my password through the history of my password manager. The new setting you introduced is a great idea too.

dlebee · March 23, 2020, 7:22pm

Hello Sebastian can it u pdate an existing admin or i t has to be a new email? it dosen’t seem to work for me even though at startup I see the right envirnoment variables configured (v 4.1.3 of docker image)

Sebastian · March 24, 2020, 5:10pm

It can either be an existing user or a new user.

github.com

Squidex/squidex/blob/e0383fcf2c18d70295e4e67e24e5363d2194ccb3/backend/src/Squidex/Areas/IdentityServer/Config/CreateAdminHost.cs

// ==========================================================================
//  Squidex Headless CMS
// ==========================================================================
//  Copyright (c) Squidex UG (haftungsbeschraenkt)
//  All rights reserved. Licensed under the MIT license.
// ==========================================================================

using System;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Identity;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.Options;
using Microsoft.IdentityModel.Logging;
using Squidex.Config;
using Squidex.Config.Startup;
using Squidex.Domain.Users;
using Squidex.Infrastructure.Log;
using Squidex.Infrastructure.Security;

This file has been truncated. show original

This is the code

sgalcheung · August 13, 2024, 3:18pm

If you forget your password, you can try to use the password of a known account. Find the account whose password you forgot by email or username in the database Identity_Users table and replace the password hash with the password hash of the known password.

This is just a workaround, not a feature.