Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-16476

API key changes when the regular account password changes

    XMLWordPrintable

    Details

    • Story Points:
      2

      Description

      NuGet API keys should be tied to identity ( username + realm identity), and identity should not include profile attributes such as regular password, user first name, last name, or email.

      Nexus 3.x: Change the regular password of a repository manager user account. This will change the NuGet API key as well. This should not happen.

      Nexus 2.x does not change the NuGet API key when password or any other account profile data changes.

      Related mailing list exchange: https://groups.google.com/a/glists.sonatype.com/d/msgid/nexus-users/19330e21-3372-418f-9cd3-0b4c8fa89f69%40glists.sonatype.com?utm_medium=email&utm_source=footer

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              natemcafee Nate McAfee
              Reporter:
              plynch Peter Lynch
              Last Updated By:
              Peter Lynch
              Team:
              Nexus - Core
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response:

                  tigCommentSecurity.panel-title