Sites must be configured to require email verification.

  1. Visit subsite registration form and register
  2. Click login link in email
  3. Click login button on page
  4. Be served user login page

Step 4 shouldn't happen, user should be authenticated.

_bakery_reset_submit() does === check on account->login when instead it's a string.

CommentFileSizeAuthor
#1 1917632-bakery-d7.patch470 bytescoltrane
#1 1917632-bakery-d6.patch486 bytescoltrane

Comments

coltrane’s picture

Status: Active » Needs review
StatusFileSize
new486 bytes
new470 bytes
drumm’s picture

Status: Needs review » Reviewed & tested by the community

Looks good, I tested exactly this on Drupal.org staging.

coltrane’s picture

Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.