Prevent-anonymous-access prevents non authenticated users from accessing the forgotten password screen

Question

Hi,

I've found an issue which is that this plugin (1.2) prevents non authenticated users from accessing the forgotten password screen.  Whilst other functionality is great, this side effect has real user management implications.

Have tested this on Jira 6.3.15 and 6.4.7

Any workarounds /  fixes?

Darren Campbell · Accepted Answer

This has been resolved via a plugin update (1.3) which whitelists the url "/secure/ForgotLoginDetails.jspa"