Hi,

It appears that the module also redirects the user when coming from a password reset link with token. This prevents users from resetting their passwords unless they know their current password.

Marking this as major as it's affecting core functionality.

CommentFileSizeAuthor
#4 login-redirect-per-role-ignore-password-reset-3033796-4.patch1.94 KBscott_euser

Comments

Baik Ho created an issue. See original summary.

baikho’s picture

baikho commented
Related issues: +#2976749: Password reset link should not redirect to the configured paths., +#3001161: Merge with redirect_after_login

Adding relevant issue in similar Redirect after login module

The module also seems to redirect on a per role basis, so we might just switch to that module. See also https://www.drupal.org/project/login_redirect_per_role/issues/3001161

baikho’s picture

baikho commented
Assigned: baikho » Unassigned
scott_euser’s picture

scott_euser commented
Version: 8.x-1.2 » 8.x-1.x-dev
Status: Active » Needs review
StatusFileSize
new login-redirect-per-role-ignore-password-reset-3033796-4.patch1.94 KB

Patch added covering full password reset process.

mortona2k’s picture

mortona2k commented
Status: Needs review » Reviewed & tested by the community

Thanks very much, this looks good to me.

It's simply checking the route and skips redirecting if it matches:

user.reset
user.reset.login
user.reset.form

  • Antonnavi committed f914275 on 8.x-1.x authored by scott_euser 
    Issue #3033796 by scott_euser: Redirects should be ignored on Password...
antonnavi’s picture

antonnavi
Primary language Ukrainian
Location Leipzig
commented
Status: Reviewed & tested by the community » Fixed
pratik.mehta19’s picture

pratik.mehta19 commented
Status: Fixed » Closed (fixed)