Prevent-anonymous-access prevents non authenticated users from accessing the forgotten password screen

[Darren Campbell]

Hi,

I've found an issue which is that this plugin (1.2) prevents non authenticated users from accessing the forgotten password screen.  Whilst other functionality is great, this side effect has real user management implications.

Have tested this on Jira 6.3.15 and 6.4.7

Any workarounds /  fixes?

[Darren Campbell · Accepted solution]

This has been resolved via a plugin update (1.3) which whitelists the url "/secure/ForgotLoginDetails.jspa"