1.On registration the user can set his password.
2.Email gets sent to user with [user:one-time-login-url] link.
3.User clicks on link (gets authenticated - yea!), but sees a page talking about resetting the password and a login button
4. click on login button ->goes to user edit page to reset password (which is confusing since it's already set)...and never goes to the "Redirect path on confirmation" page (more confusing because the user doesn't know what to do next).
5. Ideally, on clicking the email link the user would go to the "Redirect path on confirmation" a page with a message that says verified (automatically logs in?) OR a page that says verified and they login -> with url destination to "Redirect path on confirmation"

....since Redirect path on confirmation is present, I'm think I may just have the wrong on-time-login-url token. Please let me know where I should be looking or working on the code. Thanks

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

hellomobe’s picture

Title: Verification with Password Reset redirect » Verification without Password Reset redirect

sorry, clarifying the title

stevecowie’s picture

If you take a look at the configuration page for LT you'll see that there's a link there on the instructions about configuring the email if you are allowing users to set their own password:
"NOTE: If you enable this feature, you should edit the Welcome (no approval required) text. More help in writing the e-mail message can be found at LoginToboggan help".
You can customize the email and add clarification about what's going to happen once the user has confirmed their email.

hellomobe’s picture

Status: Active » Closed (works as designed)

Brilliant - [user:validate-url] is the token I needed. Tested and fantastic. Sincere apologizes for overlooking the help menu. Thank you

johnnydarkko’s picture

Ha! overlooked this one too, thanks for the post @hellomobe and for the heads up @stevecowie!
[user:validate-url] worked for me, too!

ChrisValentine’s picture

Doesn't seem to have helped for me. Instead of the misleading "Password reset" page, I now get:

User account
Error message
Sorry, you can only use your validation link once for security reasons. Please log in with your username and password instead now.

...which is tosh since I've not used the validation link before. Have had to revert to [user:one-time-login-url]

Even more confusing: once you've clicked the validation link and passed through the "Password reset" page, you land on the user account edit form and are presented with the alert message "You have just used your one-time login link. It is no longer necessary to use this link to log in. Please change your password." - where again, changing password is likely not what the new user wants to do at this stage.

cristian100’s picture

Issue summary: View changes

Hi ChrisValentine, I have this same issue, using [user:validate-url], I get the same error message.

Sorry, you can only use your validation link once for security reasons. Please log in with your username and password instead now.

Did you got to fix this? how?

sgurlt’s picture

I ran into the same issue 1 hour ago, wasnt able to fix it for now.

Setup is attached.

sgurlt’s picture

I ran into the same issue 1 hour ago, wasnt able to fix it for now.

Setup is attached.

sgurlt’s picture

Ok finally got this working ...
I order to use that functionality, you MUST create a new role for Pre-authorized Users and configure this in the logintoboggan settings page.

logintoboggan settings

After doing that, things started to work. When the validation is sucessful, the pre authentication role will be removed automatically again from the user by logintoboggan.

I think this should be added somewhere in the docs.

sgurlt’s picture

Component: Miscellaneous » Documentation
Status: Closed (works as designed) » Needs review