Skip to content

Forgot Password: disable anonymous users#10997

Open
Karuna-Mendix wants to merge 5 commits intodevelopmentfrom
kv-forgot-password
Open

Forgot Password: disable anonymous users#10997
Karuna-Mendix wants to merge 5 commits intodevelopmentfrom
kv-forgot-password

Conversation

@Karuna-Mendix
Copy link
Copy Markdown
Collaborator

@Karuna-Mendix Karuna-Mendix commented Apr 9, 2026

6.5.0

Comment thread content/en/docs/marketplace/platform-supported-content/modules/forgot-password.md Outdated

Starting from version 6.5.0 of the module, you can disable anonymous users. Additionally, check whether `Anonymous` user role can be removed from the app. If your application does not require anonymous access, removing the role is recommended as a security best practice.

To disable anonymous users, set the `EnableAnonymousUserRole` constant to *False* in the module. By default this value is set to *True*. Once the constant value is set to *False*, end users can access the login flow via the `https://<your-app-url>/forgotpassword/v1/login` URL. When accessing the URL, users are automatically redirected to a login page where they can sign in, sign up, or reset their password.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we had agreed to put the default to FALSE.
It breaks backward comptability but enforces customers to make a deliberate decision.

Comment thread content/en/docs/marketplace/platform-supported-content/modules/forgot-password.md Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants