Password link on forgotten password instead of plain text

Hi,

We are new to using Community Builder and progressing well with our new site, so thank you for the great software.
We do however have an issue with the forgot my password functionality as it sends a plain text password. We are a charity that has high security requirements that require us to use secure link password reset. I can see there is a feature proposal for this forge.joomlapolis.com/issues/5680 and it is targeted for December 31st CB 2.5. Could I please check to see if this feature is still on track?

We are hoping to release our new platform in January 2021 and would ideally love to use the features of CB as much as possible, and ideally don't want to attempt some workarounds, unless you know of a temporary solution that may work for us.

Many thanks,

Kevin

It is highly unlikely password reset functionality will be rewritten by then. We don't plan to do any major changes like that until we've Symfony components implement to reduce our code development overhead. We'll be starting implementation of Symfony components late December or early January at its earliest. So unlikely to see that feature until probably second quarter of next year.

CB 2.5 primary focus is to be Joomla 4 compatible.

As a temporary solution navigate to Extensions > Plugins and edit "Community Builder System plugin" then set "Redirect URLs" and "Rewrite URLs" to "Disable". You can then use Joomlas password reset form, but please be sure you have turned off Joomla registration otherwise users could bypass CBs registration process by using Joomlas.

Thank you very much for your response and suggestions Krileon, I will look into the Joomla password reset form.