Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Password policies are checked even though there is no password field in the case that registration requires e-mail verification.
Comment | File | Size | Author |
---|---|---|---|
#12 | password_policy-registration_form-2643460-12-8.x-3.x.patch | 1.64 KB | nerdstein |
#9 | password_policy-registration_form-2643460-9-8.x-3.x.patch | 1014 bytes | mxr576 |
#3 | password_policy-registration_form-2643460-3-8.x-3.x.patch | 622 bytes | nerdstein |
Comments
Comment #2
nerdsteinWhat are the steps to reproduce? I just want to make sure I am seeing the same thing.
Comment #3
nerdsteinfor review
Comment #4
AohRveTPV CreditAttribution: AohRveTPV commentedI think the steps were to try to register a new account with the default Drupal settings.
The patch might not work for all configurations. I think there is a combination of settings where the password fields do appear on the user registration form (e-mail verification and administrator approval not required?). An administrator may want a password policy to be applied for them.
I can check later and report back. Don't have access to a D8 installation currently.
Comment #5
nerdsteinI tested the use case and it worked for me. If there are more, let me know.
Comment #6
AohRveTPV CreditAttribution: AohRveTPV commentedThanks. The patch seems to fix the problem I reported. However, it causes the policy/constraints table to disappear on the user registration form with the following settings:
Administration > Configuration > People > Account settings > Registration and cancellation:
Who can register accounts?: Visitors
Require e-mail verification when a visitor creates an account: unchecked
Validation versus policies still occurs upon form submission.
Comment #7
nerdsteinI'll take a look at that
Comment #8
mxr576I think my patch contains a better solution for this issue, because the main problem here is the "Require e-mail verification when a visitor creates an account: checked" settings.
Comment #9
mxr576Fixed the name of the config variable.
Comment #10
nerdsteinReviewed #9 and will be committed up this weekend.
Comment #11
mahalingam_cs CreditAttribution: mahalingam_cs at TATA Consultancy Services commentedPatch work for me and the issue is fixed.
Comment #12
nerdstein#9 patch is too overreaching. There needs to be additional conditions to only apply the verify mail config during registration and not globally. New patch applied.
Comment #14
nerdsteinComment #17
nerdsteinThis is working, not sure why it was pushed back