When the user is forced to change the password and submits the new password, the form validation fails and shows "Your current password is missing or incorrect".
| Comment | File | Size | Author |
|---|---|---|---|
| #7 | password_policy-7.x-1.x-fix_password_tab_forced_password_change-2426317-7.patch | 736 bytes | aohrvetpv |
| #3 | current_password-2426317-3.patch | 768 bytes | drikc |
| current_password.patch | 832 bytes | vadimk |
Comments
Comment #1
aohrvetpv commentedThanks for the report and patch, but I am unable to reproduce this so far. For your site, what is the path of the page where the user is forced to change their password?
The module has tests to ensure that forced password changes work without error (e.g.,
testSingleError()), so this must be working for some configurations. I am wondering if the difference in variables to unset is due to some difference in your password change page.Comment #2
drikc commentedI'm facing this problem and the patch in #0 fix the issue.
The page path where the user is forced to change its password is the following: user/<uid>/password
I'm not sure the test case is covering this correctly as it user a different path (user/<uid>/edit), here is the code for testSingleUser() method (near line 462):
Comment #3
drikc commentedRe-do the patch in #0 to be relative to the module root.
Comment #5
aohrvetpv commentedThanks. The
user/<uid>/passwordpath is used by the 'Password change tab' module, so I suspect this problem occurs only when that module is enabled. Will try to fix.Comment #6
aohrvetpv commentedwrong version
Comment #7
aohrvetpv commentedConfirmed problem and this patch seems to fix. Please test.
Comment #8
drikc commentedI confirme #7 patch fixes.
Thanks
Comment #9
vadimk commentedThanks. It looks good.
Comment #11
aohrvetpv commentedComment #12
aohrvetpv commentedBug does not look to exist in 6.x-1.x.
Leaving open for now, until tests added to ensure no regressions.
Comment #13
abarpetia commentedThanks for #7 patch. It worked perfectly for me.
Comment #14
aohrvetpv commentedComment #15
aohrvetpv commentedOpened new issue for missing tests:
#2463527: No tests for forced password changes using Password Change Tab