Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-4324

Enabling public signup does not display Captcha

    XMLWordPrintable

Details

    Description

      NOTE: This bug report is for JIRA Service Desk Server. Using JIRA Service Desk Cloud? See the corresponding bug report.

      Update as of March 2018

      Several customers have reported that their instances have recently been flooded with spam accounts that appear to be part of a systematic phishing attack, which suggests that the honeypot strategy we’ve been using since JSD 3.2 is no longer effective.

      This is a slightly different issue to JSD-4324 and JSD-1316 as they were first reported, so to minimise any confusion, please head to JSDSERVER-5706 for more details, including two potential workarounds and a guide to cleaning up the spam.

      On behalf of the JSD server team, we’re sorry for the inconvenience this has caused, and we’ll make a solution available as soon as we can.

      Update as of May 2017

      Hi everyone,
      The fix for this issue was released in JSD 3.2.0. Instead of Captcha, we implemented the honeypot technique to prevent spam bots from creating accounts on the customer portal. Here's more information about it: https://confluence.atlassian.com/display/AdminJIRAServer072/Enabling+public+signup+and+CAPTCHA

      Summary

      Currently when public signup is enabled for both JIRA and Service Desk, Captcha is only displayed from JIRA signup page, not from Customer Portal signup page.

      Steps to reproduce

      1. Go to JIRA Administration -> System -> General Configuration -> Edit Settings
      2. Change Mode to Public and CAPTCHA on signup to ON
      3. Go to JIRA Administration -> Applications -> JIRA SERVICE DESK -> Configuration -> Turn ON Public signup
      4. Sign up a new account from JIRA and then from Customer Portal

      Expected behavior

      CAPTCHA is displayed on both signup pages.

      Actual behavior

      CAPTCHA is only displayed on JIRA signup page. It's not available on Customer Portal signup page:

      Note

      It seems that CAPTCHA on signup from General Configuration only takes effect on JIRA side, not Customer Portal

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. JSDSERVER-1316 Service Desk Cloud - Enabling public signup does not display Captcha

          • Low - Low priority issues
          • Closed
          has a regression in

          Bug - A problem which impairs or prevents the functions of the product. JSDSERVER-5706 Honeypot strategy is no longer effectively preventing spam account signup

          • High - High priority issues
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JSDCLOUD-4324 Enabling public signup does not display Captcha

          • High - High priority issues
          • Closed
          mentioned in

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              sraj Suren Raj
              Votes:
              10 Vote for this issue
              Watchers:
              33 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Backbone Issue Sync