password recovery fails due outdated recaptcha

Posted:
Fri Jul 20, 2018 8:41 am
by knireis
It is impossible to recover the password because of an outdated recaptcha in subsonic.
Any workaround or upgrade to this?
Re: password recovery fails due outdated recaptcha

Posted:
Fri Jul 20, 2018 7:37 pm
by toolman
If you are running your own Subsonic Server you can reset passwords yourself. See
viewtopic.php?f=2&t=3084
Re: password recovery fails due outdated recaptcha

Posted:
Sun Jul 22, 2018 6:50 am
by MichaelT
Hi folks,
toolman wrote:If you are running your own Subsonic Server you can reset passwords yourself. See
viewtopic.php?f=2&t=3084
instead of reseting the admin password in the db I would like also getting a proper password recovery routine.
Is there a way to exclude the reCAPTCHA in the password recovery page?
Best greetings,
MichaelT
Re: password recovery fails due outdated recaptcha

Posted:
Sun Jul 22, 2018 10:33 am
by MichaelT
Hi Toolman,
thanks for your prompt feedback. As far I have understood the subsonic installation on my ubunutu server (16.02 LTS) is not using the MySQL server at all. So these instructions doesnt apply. If this insert statement works on the db/subsonic.script I dont know (only the author of subsonic can answer this question).
Best greetings,
MichaelT
Re: password recovery fails due outdated recaptcha

Posted:
Sun Jul 22, 2018 8:57 pm
by toolman
The issue exists from March and Sindre doesn't seem to do any work on Subsonic anymore.
The current 6.1.3.version is released in november 2017. Since that time there is no Beta released, so I'm wondering if Subsonic has reached the end of the line.
On the other hand I'm very happy that password recovery doesn't work anymore.
If one of my users wanted a very easy (and unsafe) password to remember they just used this method, despite the fact that I configured their account to not be able to change their password.
I have a solution for this problem if you use NGINX with php

Posted:
Wed Sep 19, 2018 5:35 pm
by Rob
Hi,
I have a solution to solve this problem. I have put nginx in front of subsonic, with php activated, then, i created an (php based) alternative password recovery system with validation email, using the subsonic API and cURL, to change the user password and works like a charm. If anyone are interested on this solution, i can help you to implement it.
If many people ask me, I suppose it would be better to publish the little application on github or something like that, but since it is a temporary patch, I do not know if it would be correct.
Greetings!.