Problem/Motivation

The Password Policy module expects either a login via a one-time login link—setting the user_pass_reset form state variable—or that the user provides both the current and a new password. Currently, the Simple Password Reset flow does neither of these.

Reference:
https://git.drupalcode.org/project/password_policy/-/blob/4.0.x/password...

Steps to reproduce

  1. Set up a password expiration policy using Password Policy.
  2. Use Simple Password Reset to change a user's password.
  3. Observe that the password expiration date is not updated.

Proposed resolution

Set the user_pass_reset form state variable during the Simple Password Reset process. This allows Password Policy to recognize the reset context and update the expiration date accordingly during validation.

Reference for user_pass_reset:
https://git.drupalcode.org/project/drupal/-/blob/10.4.x/core/modules/use...

CommentFileSizeAuthor
#2 pass-reset-value-3519278.patch1.06 KBwillempje2

Issue fork simple_pass_reset-3519278

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

About issue forks

Comments

willempje2 created an issue. See original summary.

willempje2’s picture

willempje2 commented
StatusFileSize
new pass-reset-value-3519278.patch1.06 KB
willempje2’s picture

willempje2 commented
Category: Bug report » Feature request

astonvictor made their first commit to this issue’s fork.

astonvictor’s picture

astonvictor commented
Version: 8.x-1.4 » 2.0.x-dev

astonvictor opened merge request !25

astonvictor’s picture

astonvictor commented
Status: Active » Fixed

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.