The email sends a link with a hash generated by login_one_time_get_hash, which is then compared to the hash returned by user_pass_rehash which now doesn't match.

Attached is a patch against dev that removes login_one_time_get_hash and updates the email to use user_pass_rehash to match the comparison.

CommentFileSizeAuthor
#2 remove_login_one_time_get_hash-2773593-2.patch801 bytesKarlShea
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

KarlShea created an issue. See original summary.

KarlShea’s picture

KarlShea
he/him
Primary language English
Location Minneapolis 🇺🇸
CreditAttribution: KarlShea commented
Status: Active » Needs review
FileSize
remove_login_one_time_get_hash-2773593-2.patch801 bytes
bapi_22’s picture

bapi_22 CreditAttribution: bapi_22 at Cybage Software Pvt Ltd. commented
Assigned: Unassigned » bapi_22

  • bapi_22 authored a541e38 on 6.x-2.x 
    Issue #2773593 by KarlShea, bapi_22: login_one_time_get_hash doesn't...
bapi_22’s picture

bapi_22 CreditAttribution: bapi_22 at Cybage Software Pvt Ltd. commented
Status: Needs review » Fixed

Committed. Thanks.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.