RUN-4217: Document password reset link expiration#1792
Conversation
Add Link Expiration section to password-reset.md documenting the new configurable TTL for reset links (default 7d), the config key rundeck.security.dblogin.resetLink.maxDuration, supported duration formats, and the 403 behavior on expiry. Also note the lack of a self-service resend flow and add the config key to Additional Configs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
There was a problem hiding this comment.
Pull request overview
Adds documentation for the new configurable password reset link TTL so admins understand how long reset links remain valid and how to tune/operate the behavior.
Changes:
- Adds a Link Expiration section explaining default behavior (7 days), supported duration formats, and admin actions when links expire.
- Documents the new config key
rundeck.security.dblogin.resetLink.maxDuration, including defaults and format constraints. - Adds the config key to the Additional Configs reference list.
|
|
||
| To change the expiration duration, set the following in `rundeck-config.properties` or *Configuration Management*: | ||
|
|
||
| `rundeck.security.dblogin.resetLink.maxDuration = <duration>` |
There was a problem hiding this comment.
This property example uses spaces around =. Since this page already shows rundeck.password.reset.enabled=true without spaces (and other docs warn that spaces can matter in some contexts), consider switching this to key=value formatting to make copy/paste usage consistent and unambiguous.
| `rundeck.security.dblogin.resetLink.maxDuration = <duration>` | |
| `rundeck.security.dblogin.resetLink.maxDuration=<duration>` |
| Password reset links expire after a configurable duration. By default, links expire after **7 days**. Expired links return a 403 error, treated the same as invalid tokens. | ||
|
|
There was a problem hiding this comment.
For clarity/precision, consider referring to this as an "HTTP 403 (Forbidden)" response (and/or "403 Forbidden") rather than a generic "403 error", since readers may not immediately connect it to HTTP status codes.
gschueler
changed the title
|
@copilot address the suggestions |
Agent-Logs-Url: https://github.com/rundeck/docs/sessions/b5c5c08f-995f-48c9-8b5c-82baec0dc160 Co-authored-by: gschueler <55603+gschueler@users.noreply.github.com>
Addressed in commit
Screenshot of the rendered docs section: https://github.com/user-attachments/assets/6a9e8e78-5537-409a-842c-2150c310f8bf Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Summary
docs/manual/user-management/password-reset.mddocumenting the configurable TTL for password reset links introduced in rundeckpro/rundeckpro#4623rundeck.security.dblogin.resetLink.maxDuration(default7d, supportsd/h/mformats)Related
Test plan
npm run docs:dev)rundeck.security.dblogin.resetLink.maxDurationappears in the Additional Configs list🤖 Generated with Claude Code