{"action":"opened","issue":{"url":"https://api.github.com/repos/alpha1/MagazineXperts-Maghub/issues/18","repository_url":"https://api.github.com/repos/alpha1/MagazineXperts-Maghub","labels_url":"https://api.github.com/repos/alpha1/MagazineXperts-Maghub/issues/18/labels{/name}","comments_url":"https://api.github.com/repos/alpha1/MagazineXperts-Maghub/issues/18/comments","events_url":"https://api.github.com/repos/alpha1/MagazineXperts-Maghub/issues/18/events","html_url":"https://github.com/alpha1/MagazineXperts-Maghub/issues/18","id":172158784,"number":18,"title":"Security: New user email sends password in plaintext, no generate or reset options","user":{"login":"alpha1","id":138439,"avatar_url":"https://avatars.githubusercontent.com/u/138439?v=3","gravatar_id":"","url":"https://api.github.com/users/alpha1","html_url":"https://github.com/alpha1","followers_url":"https://api.github.com/users/alpha1/followers","following_url":"https://api.github.com/users/alpha1/following{/other_user}","gists_url":"https://api.github.com/users/alpha1/gists{/gist_id}","starred_url":"https://api.github.com/users/alpha1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alpha1/subscriptions","organizations_url":"https://api.github.com/users/alpha1/orgs","repos_url":"https://api.github.com/users/alpha1/repos","events_url":"https://api.github.com/users/alpha1/events{/privacy}","received_events_url":"https://api.github.com/users/alpha1/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-19T15:33:51Z","updated_at":"2016-08-19T15:33:51Z","closed_at":null,"body":"The email sent automatically when a new user is created includes the user's password, entered by the admin, in plaintext. There's a few problems with this\r\n- Sending passwords over email in plain text is never a good idea, as email can be intercepted. \r\n- There is no built in tools for generating an strong random password, or requireing the user to set a password on their first login\r\n- the admin may need to set the user up before they user has actually started (new hires), so there is time to transfer accounts to their name, or set up permissions. "}}
{"actor":{"display_login":"alpha1"}}