Uploaded image for project: 'Jira Service Management Data Center'
  1. Jira Service Management Data Center
  2. JSDSERVER-4324

Enabling public signup does not display Captcha

XMLWordPrintable

      NOTE: This bug report is for JIRA Service Desk Server. Using JIRA Service Desk Cloud? See the corresponding bug report.

      Update as of March 2018

      Several customers have reported that their instances have recently been flooded with spam accounts that appear to be part of a systematic phishing attack, which suggests that the honeypot strategy we’ve been using since JSD 3.2 is no longer effective.

      This is a slightly different issue to JSD-4324 and JSD-1316 as they were first reported, so to minimise any confusion, please head to JSDSERVER-5706 for more details, including two potential workarounds and a guide to cleaning up the spam.

      On behalf of the JSD server team, we’re sorry for the inconvenience this has caused, and we’ll make a solution available as soon as we can.

      Update as of May 2017

      Hi everyone,
      The fix for this issue was released in JSD 3.2.0. Instead of Captcha, we implemented the honeypot technique to prevent spam bots from creating accounts on the customer portal. Here's more information about it: https://confluence.atlassian.com/display/AdminJIRAServer072/Enabling+public+signup+and+CAPTCHA

      Summary

      Currently when public signup is enabled for both JIRA and Service Desk, Captcha is only displayed from JIRA signup page, not from Customer Portal signup page.

      Steps to reproduce

      1. Go to JIRA Administration -> System -> General Configuration -> Edit Settings
      2. Change Mode to Public and CAPTCHA on signup to ON
      3. Go to JIRA Administration -> Applications -> JIRA SERVICE DESK -> Configuration -> Turn ON Public signup
      4. Sign up a new account from JIRA and then from Customer Portal

      Expected behavior

      CAPTCHA is displayed on both signup pages.

      Actual behavior

      CAPTCHA is only displayed on JIRA signup page. It's not available on Customer Portal signup page:

      Note

      It seems that CAPTCHA on signup from General Configuration only takes effect on JIRA side, not Customer Portal

        1. sdsignup.png
          sdsignup.png
          11 kB

            [JSDSERVER-4324] Enabling public signup does not display Captcha

              Unassigned Unassigned
              sraj Suren Raj
              Affected customers:
              10 This affects my team
              Watchers:
              33 Start watching this issue

                Created:
                Updated:
                Resolved: