The email sends a link with a hash generated by login_one_time_get_hash, which is then compared to the hash returned by user_pass_rehash which now doesn't match.

Attached is a patch against dev that removes login_one_time_get_hash and updates the email to use user_pass_rehash to match the comparison.

CommentFileSizeAuthor
#2 remove_login_one_time_get_hash-2773593-2.patch801 byteskarlshea

Comments

KarlShea created an issue. See original summary.

karlshea’s picture

karlshea
he/him
Primary language English
Location Minneapolis 🇺🇸
commented
Status: Active » Needs review
StatusFileSize
new remove_login_one_time_get_hash-2773593-2.patch801 bytes
bapi_22’s picture

bapi_22 commented
Assigned: Unassigned » bapi_22

  • bapi_22 authored a541e38 on 6.x-2.x 
    Issue #2773593 by KarlShea, bapi_22: login_one_time_get_hash doesn't...
bapi_22’s picture

bapi_22 commented
Status: Needs review » Fixed

Committed. Thanks.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.